question about ra

[Carter Bullard]

Sergey,
   The 32-bit status value that is in every Argus record has
a bit that is referred to as, REVERSE, which tells Argus
clients that all the fields need to swapped.  This happens
because Argus can discover, while tracking a specific
flow, that the source and destination assignments need
to be swapped.

   It is likely that you have this bit set.

Carter

> -----Original Message-----
> From: sergo at links.ru [mailto:sergo at links.ru]
> Sent: Monday, January 24, 2000 1:33 PM
> To: Bullard, Carter [NYPAR:DS33:EXCH]
> Subject: RE: question about ra
> 
> 
> > Hey Sergio,
> 
> Hello
> 
> I resolve some problems with your help. Now ip-address is writing in
> the true order. But the problem of wrong source and 
> destination is remain.
> In my data's source is 195.3.152.125  and destination is 
> 193.81.67.208,
> but ra client saing that
> Sun 10/01 01:39:36  udp   193.81.67.208.53   ->   195.3.152.125.53
> 
> This not only with ip-address, but with port's an total count 
> bytes and
> send packets. 
> Why ra clients read my data like this?
> 
> Thank you.
> -----------------------------------------------------------
> Sergey Artjushkin                               Relcom Corp.
> Tel: 196-72-12                                    Moscow
> 
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20000125/bedd01cf/attachment.html>