Established connections

wozz at 0xdeadbeef.org wozz at 0xdeadbeef.org
Mon Jul 29 13:56:57 EDT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If my assumption is correct, The 'est' keyword in a filter is going to show me flows that were established.  Is there a way to only show flows that are CURRENTLY established?  In other words, the connection was established, and no fin/rst has been received?  Would ragator do a better job of this?
-----BEGIN PGP SIGNATURE-----
Version: Hush 2.1
Note: This signature can be verified at https://www.hushtools.com

wlsEARECABsFAj1FgkAUHHdvenpAMHhkZWFkYmVlZi5vcmcACgkQ1vK8vFo3sjzkZwCa
A5X9RDXR32REKwoqu7ojfx+RngQAn1x6n6cpB1N10QskwwnUlp7T20Tk
=FcPj
-----END PGP SIGNATURE-----



More information about the argus mailing list