argus-2.0.0j option sensitivity?

Carter Bullard carter at qosient.com
Fri Sep 29 07:58:55 EDT 2000


I think you are the first to try the dual interface support.
Order dependant behavior.  Hmmmmmmmmmm.

So it would seem that there is a little bug about.  I'll
take a look around.  I put the support together in about
an hour, so I'm sure I'm missing something.

Thanks for trying this!!!

Carter



-----Original Message-----
From: Mark Poepping [mailto:poepping at cmu.edu]
Sent: Friday, September 29, 2000 2:00 AM
To: Carter Bullard
Cc: Argus (E-mail)
Subject: RE: argus-2.0.0j option sensitvity?


I was also having some trouble with the dual interface..

eth1 has traffic, eth2 doesn't (but interface is configured)

'argus_linux -i eth1' pruduces flows
'argus_linux -i eth2' pruduces nothing (as expected)
'argus_linux -i eth2 -i eth1' pruduces flows

'argus_linux -i eth1 -i eth2' pruduces nothing..

the second interface will have traffic soon (tomorrow), but
it just seemed odd..  both interfaces are identical intel
serer nics that otherwise appear okay.

mark.


-----Original Message-----
From: owner-argus at lists.andrew.cmu.edu
[mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of Mark Poepping
Sent: Friday, September 29, 2000 1:00 AM
To: carter at qosient.com
Cc: Argus (E-mail)
Subject: argus-2.0.0j option sensitvity?



ra -ncr argusfile host 10.0.0.1

doesn't appear to honor the filter, although

ra -r argusfile -nc host 10.0.0.1

seems to..

I'm getting some segfaults too.. just one process dying, no core..
guidance on debugging?  I turned on the firehose of about 40Mb
so a packet capture will be difficult..  It's been running at home for
a while, aok..

mark.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20000929/01f3f144/attachment.html>


More information about the argus mailing list