Piping argus output

Yotam Rubin yotam at makif.omer.k12.il
Mon Jun 4 21:35:58 EDT 2001


Greetings,

  I've been thinking that it would be nice if argus could pipe its output
to external programs. This applies for both the captured packets and the  
flow data. A possible syntax for this piping would be to prefix the argument
of relevant directives (ARGUS_OUTPUT_FILE and ARGUS_PACKET_CAPTURE_FILE) with
'|'. Piping is pretty useful, as it extremely increases flexibility.
Piping can come in handy when one does not wish to store packet dumps on one's
logging argus host. One could pipe the packet dumps to an ssl wrapped 
netcat and securely transmit packets to a safe host. It would be nice of course
if argus supported this kind of packet transmission in the same manner that
argus supports flow transmission, but flexibility is always solicited.
What do you think?

	Regards, Yotam Rubin



More information about the argus mailing list