argus-2.0.0j option sensitivity?
Carter Bullard
carter at qosient.com
Fri Sep 29 07:58:55 EDT 2000
I think you are the first to try the dual interface support.
Order dependant behavior. Hmmmmmmmmmm.
So it would seem that there is a little bug about. I'll
take a look around. I put the support together in about
an hour, so I'm sure I'm missing something.
Thanks for trying this!!!
Carter
-----Original Message-----
From: Mark Poepping [mailto:poepping at cmu.edu]
Sent: Friday, September 29, 2000 2:00 AM
To: Carter Bullard
Cc: Argus (E-mail)
Subject: RE: argus-2.0.0j option sensitvity?
I was also having some trouble with the dual interface..
eth1 has traffic, eth2 doesn't (but interface is configured)
'argus_linux -i eth1' pruduces flows
'argus_linux -i eth2' pruduces nothing (as expected)
'argus_linux -i eth2 -i eth1' pruduces flows
'argus_linux -i eth1 -i eth2' pruduces nothing..
the second interface will have traffic soon (tomorrow), but
it just seemed odd.. both interfaces are identical intel
serer nics that otherwise appear okay.
mark.
-----Original Message-----
From: owner-argus at lists.andrew.cmu.edu
[mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of Mark Poepping
Sent: Friday, September 29, 2000 1:00 AM
To: carter at qosient.com
Cc: Argus (E-mail)
Subject: argus-2.0.0j option sensitvity?
ra -ncr argusfile host 10.0.0.1
doesn't appear to honor the filter, although
ra -r argusfile -nc host 10.0.0.1
seems to..
I'm getting some segfaults too.. just one process dying, no core..
guidance on debugging? I turned on the firehose of about 40Mb
so a packet capture will be difficult.. It's been running at home for
a while, aok..
mark.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20000929/01f3f144/attachment.html>
More information about the argus
mailing list