New ra output docs

Peter Van Epp vanepp at sfu.ca
Mon Apr 22 17:58:33 EDT 2002


	Documented in man ra under the proto [options protocol] section (the
list of that the interesting letters, src retransmits in this case) are there.
The numbers are src dst packets and src dst byte counts (also in the man page).

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada

> 
> I've updated to the new 2.0.5 beta's and I'm noticing some new info in the
> ra tools output that doesn't appear to be documented.  
> 
>  s        tcp  x.1179   ->    y.ssh   136      104 12120        11262       EST
>  s        tcp  x.4645   ?>    y.ssh   26       20 1948         2242        FIN
>  s        tcp  x.4769   ?>    y.ssh   180      155 13204        15084       FIN
>  *        tcp  x.1179   ->    y.ssh   124      96 10980        10732       EST
>  s        tcp  x.1179   ->    y.ssh   130      94 11676        9810        EST
>  *        tcp  x.1179   ->    y.ssh   296      220 24852        92688       EST
>  *        tcp  x.1179   ->    y.ssh   268      201 23304        55312       EST
>  *        tcp  x.1179   ->    y.ssh   122      88 10440        9176        EST
>           tcp  x.1179   ->    y.ssh   35       41 2352         7242        EST
>          icmp  x       <->     z       1        1 74           74          ECO
>          icmp  x       <->     z       1        1 74 i         74          ECO
>  d        tcp  x.1179   ->    y.ssh   79       106 6444         13804       EST
> 
> Specifically, what are the flags at the beginning of the line? (s,*,d).  I
> figure the columns after the dst are the src and dst packet and byte counts,
> but I can't figure out what that first field is.
> 



More information about the argus mailing list