Argus release and argus-2.0.0M

[Chris Newton]

Thanks,  I grabbed it last night, and it is just what I was looking for.  Good 
work!

Chris

>===== Original Message From "Carter Bullard" <carter at qosient.com> =====
>Hey Chris,
>   You'll find the pre-release of Argus-2.0 at
>ftp://qosient.com/dev/argus/argus-2.0/argus-2.0.tar.gz
>
>Carter
>
>Carter Bullard
>QoSient, LLC
>300 E. 56th Street, Suite 18K
>New York, New York  10022
>
>carter at qosient.com
>Phone +1 212 813-9426
>Fax   +1 212 813-9426
>
>
>
>-----Original Message-----
>From: owner-argus at lists.andrew.cmu.edu
>[mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of Chris Newton
>Sent: Monday, January 08, 2001 6:30 PM
>To: Russell Fulton
>Cc: Argus (E-mail)
>Subject: RE: Argus release and argus-2.0.0M
>
>
>Ahh, well, yes, I was referring to 1.8. :)  I never even thought that it
>might
>have changed between the versions (silly me), and had not yet downloaded
>it.
>Thanks for the info, I'm off to download it!
>
>Chris
>
>>===== Original Message From Russell Fulton <r.fulton at auckland.ac.nz>
>=====
>>On Mon, 8 Jan 2001 18:59:35 -0400 Chris Newton <newton at unb.ca> wrote:
>>
>>> Please excuse me if this is a stupid question...  as I am new to
>Argus.
>Great
>>> work though. :)
>>
>>Questions are never stupid, answers may be ;-)
>>
>>>
>>>   I have noticed that when printing out packet and byte counts for
>the
>flows,
>>> I noticed that some flows record at least 1 packet sent/recieved, yet
>0
>bytes
>>> sent/recieved.
>>
>>I assume you are talking about argus 1.8
>>
>>>  I believe this is because the packet had no payload, hence no
>>> bytes actually transmitted.  However, if you were to use Argus to
>record
>>> flows, and from these flows determine the utilization of an Internet
>link,
>>> with byte counts, would it not be good to have a way of including the
>
>packet
>>> header size as well?  ie: 1 ICMP packet/flow is 56 bytes
>recieved/sent,
>>> instead of currently printing 0 bytes recieved/sent?  Possibly a
>command
>line
>>> option?
>>
>>Argus 2.0 does this by default, use ra -A (appication bytes) to get the
>>1.8 behaviour.
>>
>>
>>Russell Fulton, Computer and Network Security Officer
>>The University of Auckland,  New Zealand
>
>_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
>
>Chris Newton, Technical Analyst
>Computing Services, University of New Brunswick
>newton at unb.ca 506-447-3212(voice) 506-453-3590(fax)

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

Chris Newton, Technical Analyst
Computing Services, University of New Brunswick
newton at unb.ca 506-447-3212(voice) 506-453-3590(fax)