Argus 2.0 wishes

Carter Bullard cbullard at nortelnetworks.com
Fri Mar 10 11:15:56 EST 2000


Hey Neil,
   Yes, I think so.  When fragments can be mapped to the parent
flow, Argus will update the packet and byte counts for the parent,
and flip the bit on the parent flow to indicate that fragments
are seen.  For the exceptional fragment reports, the byte and
packet counts are in the standard fields, so all clients should
handle them correctly.  (Emphasis on the should).

Carter

> -----Original Message-----
> From: Neil Long [mailto:neil.long at computing-services.oxford.ac.uk]
> Sent: Friday, March 10, 2000 11:11 AM
> To: Bullard, Carter [NYPAR:DS33:EXCH]
> Subject: Re: Argus 2.0 wishes
> 
> 
> Does racount extract the bytes for fragments correctly? I assume it
> does but thought I would ask.
> 
> Cheers
> Neil
> 
> -- 
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>  Dr Neil J Long, Computing Services, University of Oxford
>  13 Banbury Road, Oxford, OX2 6NN, UK Tel:+44 1865 273232 
> Fax:+44 1865 273275
>  EMail:       Neil.Long at computing-services.oxford.ac.uk  
>  PGP:    ID 0xE88EF71F    OxCERT: oxcert at ox.ac.uk PGP: ID 0x4B11561D
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20000310/3ac22e00/attachment.html>


More information about the argus mailing list