Bug in ramon?

[Russell Fulton]

On Fri, 2003-09-05 at 20:01, Jesper S. Jensen wrote:
> First of all, I hope this is the right place to ask, if not please let 
> me know where. :-)

Yup this is the right place :)
> 
> 
> I think I discovered a bug in ramon, at least it seems like a bug and I 
> can't find any other info about it.
> 
> Ramon Version 2.0.6.beta.39
> Debian Linux 2.4.20
> 
> When I do a "ramon -M TopN -r argus.log" on a 740MB argus logfile, it 
> first of all takes a little while before it wrties anything on the 
> screen, but I figgure that's because it just takes time to process that 
> much data. BUT when it finally outputs something, it looks like it hit a 
> 32bit barrier, check out the following output (IP addresses replaced 
> with bogus numbers).

This is a feature.  Carter may have plans to extent the counters to 64
bits.

-- 
Russell Fulton, Network Security Officer, The University of Auckland,
New Zealand.