packet size descrepency

Matthew Melvin matthewm at webcentral.com.au
Sat Nov 9 21:30:33 EST 2002


On Sat, 9 Nov 2002 at 9:39am (-0500), Carter Bullard wrote:

> Hey Matthew,
>    Your absolutely correct, in that argus counts total
> bytes seen, regardless of the ARGUS_GENERATE_MAC_DATA
> variable.  Seems like this is the right behavior, so 
> that argus generates consistent data.
> 
>    Do you consider this a discrepancy?  We could
> change the name of the variable to ARGUS_INCLUDE_MAC_DATA?
> 

Well now that you've confirmed it is what I thought it was... I'm not sure 
it's a discrepancy so much as it is a difference of expectations.  I don't 
think there is any need to change the variable name but maybe an additional 
note of explination in the documentation would be useful.

That said, an additional option to ignore link layer headers entirely would
be useful.  Can I add that to the wish list? :)


-- 
:wq



More information about the argus mailing list