Argus release and argus-2.0.0M

[Chris Newton]

Please excuse me if this is a stupid question...  as I am new to Argus.  Great 
work though. :)

  I have noticed that when printing out packet and byte counts for the flows, 
I noticed that some flows record at least 1 packet sent/recieved, yet 0 bytes 
sent/recieved.  I believe this is because the packet had no payload, hence no 
bytes actually transmitted.  However, if you were to use Argus to record 
flows, and from these flows determine the utilization of an Internet link, 
with byte counts, would it not be good to have a way of including the packet 
header size as well?  ie: 1 ICMP packet/flow is 56 bytes recieved/sent, 
instead of currently printing 0 bytes recieved/sent?  Possibly a command line 
option?

Thanks

Chris

>===== Original Message From <carter at qosient.com> =====
>Gentle people,
>ftp://qosient.com/dev/argus/argus-2.0/argus-2.0.0M.tar.gz
>is now available.  This version fixes a core dumping
>problem with argus related to SNAP encapsulated packet
>decoding.  This may fix some dumping problems that
>have been reported over the holidays.  Please use
>this version for any subsequent testing.
>
>I am finished with code for the release, which will be this
>month, hopefully within a few weeks.  There are still
>documentation and packaging issues to resolve, but beyond
>that it seems like we're ready to go.
>
>If you are looking for opportunities to contribute, please
>take a look at the ./docs/FAQ and pose some questions
>that may help an Argus user.
>
>If anyone has any code that they would like included
>in the release, please get that to me this week.
>
>Thanks for all the help!!!!!!!
>
>Carter
>
>
>Carter Bullard
>QoSient, LLC
>300 E. 56th Street, Suite 18K
>New York, New York  10022
>
>carter at qosient.com
>Phone +1 212 813-9426
>Fax   +1 212 813-9426

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

Chris Newton, Technical Analyst
Computing Services, University of New Brunswick
newton at unb.ca 506-447-3212(voice) 506-453-3590(fax)