My last email today, really!

Wozz wozz+argus at wookie.net
Wed Nov 14 14:41:01 EST 2001


On Wed, Nov 14, 2001 at 12:37:42PM -0700, Wozz wrote:
> I promise!
> 
> Is there any way to specify an icmp echo reply in a flowfile rule?  I don't see
> anything in the documentation or source, but I want to make sure I'm not missing
> something.

Ok I lied, I forgot to ask another question I had.  The documentation mentions
argus writing status records with packet loss and such in them.  How does one pick
those out of the data stream, or are they logged elsewhere.



More information about the argus mailing list