argus 1.8 suggestions list

[Carter Bullard]

Hey Alex,
   Absolutely no problem, and I'll send 1.8 either today
or tomorrow.  We already support the 'net' keyword, so
you can say statements like:

   ra -nr filename src net 128.64

so that may satify your needs.
Thanks for the mail and remind me to send 1.8 if I
forget in the next day or so.

Carter

Carter Bullard
Principal Consultant
Nortel Networks
320 Park Avenue  16th Floor
New York, New York 10022
Email  cbullard at nortelnetworks.com
Phone +1 212 317 4230
Fax   +1 212 317 4324
Pager +1 800 217-7496


-----Original Message-----
From: Alexander Bochmann [mailto:bochmann at mupfel.infra.de]
Sent: Tuesday, June 01, 1999 10:31 AM
To: Carter Bullard
Subject: Re: argus 1.8 suggestions list


Hi,

...on Tue, Jun 01, 1999 at 08:54:29AM -0400, Carter Bullard wrote:

 > like.  If you would like to alpha/beta test 1.8
 > please send me mail.

Although I've probably gone on everyone's nerves with my wrong Linux error 
reports, I would be interested in this... I'll promise I will be more 
cautious ;)

 >           I'm looking into supporting 'greater' and 'less'
 >           for port numbers. 

A possibility to specify subnets instead of only hosts or Class-C blocks 
would also be great (if there is one already, I didn't find it the tcpdump 
manpage doesn't mention any expression for this...)

 >    More clients.
 >       I have heard this a lot but no specifics.  I have added
 >       a simple one.
 >          racount() - print byte and packet totals.

I was just about to write some perl script to generate this from a ra -c 
output ;)

Alex.