Question about byte/packet counts

Russell Fulton r.fulton at auckland.ac.nz
Wed Jul 24 18:23:14 EDT 2002


On Thu, 2002-07-25 at 10:09, wozz at 0xdeadbeef.org wrote:
>> 
> As you can see, the only packet/byte counts are for the flow destination.  Now, while the destination packet/byte counts should be higher than the source (these are web proxies after all), it shouldn't be infinately so ;)
> 
> Any idea whats going on?
> 

Hmmm... the byte counts *might* be right if you have used -A
(applications bytes) but the packet counts are definitly screwy.

What filters and flags were you using on ra and argus.  Is it possible
that you are filtering out traffic in the other direction?

Cheers, Russell.



More information about the argus mailing list