Established connections
wozz at 0xdeadbeef.org
wozz at 0xdeadbeef.org
Mon Jul 29 13:56:57 EDT 2002
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
If my assumption is correct, The 'est' keyword in a filter is going to show me flows that were established. Is there a way to only show flows that are CURRENTLY established? In other words, the connection was established, and no fin/rst has been received? Would ragator do a better job of this?
-----BEGIN PGP SIGNATURE-----
Version: Hush 2.1
Note: This signature can be verified at https://www.hushtools.com
wlsEARECABsFAj1FgkAUHHdvenpAMHhkZWFkYmVlZi5vcmcACgkQ1vK8vFo3sjzkZwCa
A5X9RDXR32REKwoqu7ojfx+RngQAn1x6n6cpB1N10QskwwnUlp7T20Tk
=FcPj
-----END PGP SIGNATURE-----
More information about the argus
mailing list