argus 1.8 suggestions list
cbullard at nortelnetworks.com
Tue Jun 1 11:50:30 EDT 1999
Absolutely no problem, and I'll send 1.8 either today
or tomorrow. We already support the 'net' keyword, so
you can say statements like:
ra -nr filename src net 128.64
so that may satify your needs.
Thanks for the mail and remind me to send 1.8 if I
forget in the next day or so.
320 Park Avenue 16th Floor
New York, New York 10022
Email cbullard at nortelnetworks.com
Phone +1 212 317 4230
Fax +1 212 317 4324
Pager +1 800 217-7496
From: Alexander Bochmann [mailto:bochmann at mupfel.infra.de]
Sent: Tuesday, June 01, 1999 10:31 AM
To: Carter Bullard
Subject: Re: argus 1.8 suggestions list
...on Tue, Jun 01, 1999 at 08:54:29AM -0400, Carter Bullard wrote:
> like. If you would like to alpha/beta test 1.8
> please send me mail.
Although I've probably gone on everyone's nerves with my wrong Linux error
reports, I would be interested in this... I'll promise I will be more
> I'm looking into supporting 'greater' and 'less'
> for port numbers.
A possibility to specify subnets instead of only hosts or Class-C blocks
would also be great (if there is one already, I didn't find it the tcpdump
manpage doesn't mention any expression for this...)
> More clients.
> I have heard this a lot but no specifics. I have added
> a simple one.
> racount() - print byte and packet totals.
I was just about to write some perl script to generate this from a ra -c
More information about the argus