Me and my usual questions

Russell Fulton r.fulton at auckland.ac.nz
Fri Jun 6 05:44:18 EDT 2003


On Fri, 2003-06-06 at 21:04, Andrew Pollock wrote:
> On Thu, Jun 05, 2003 at 11:23:08AM -0400, Carter Bullard wrote:
> > Andrew,
> >    Svc only counts udp and tcp traffic, as you have
> > to have a port to do the svc counting.  Try your ramon
> > calls with the "tcp or udp" filter to verify.
> 
> Carter,
> 
> If you look at the original message I am using "tcp or udp and host blah". 
> Is this correct, or do I need to use some parenthesis?


MY golden rule if in doubt use parenthesis!  Most boolean
implementations have and binding tighter than or so the above is
probably tcp or (udp and host blah)


-- 
Russell Fulton, Network Security Officer, The University of Auckland,
New Zealand.





More information about the argus mailing list