argus-2.0.0N

[David Brumley]

> > Cisco netflow support is now working, (thanks David!).
> > All ra() based clients can read Cisco Netflow archive
> > files and can read netflow records directly from a
> > router/switch.  Ra* will convert the records to Argus
> > records if the -w option is used.
> 
> I'm afraid I may be being a bit dense -- how, precisely, does one do
> this?  I have netflow archive files, but can not get argus to
> acknowledge them.  What's the trick for this to work?

You also must have CISCO bin files (not ascii) AFAIK.

-djb

-- 
#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#
David Brumley - Stanford Computer Security -   dbrumley at Stanford.EDU
Phone: +1-650-723-2445           WWW: http://www.stanford.edu/~dbrumley
Fax:   +1-650-725-9121  PGP: finger dbrumley-pgp at sunset.Stanford.EDU
#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#
Fact: you can burn 150 caloria per hour banging your head against a wall