[ARGUS] Question about Traffic Accounting and Argus

[Rene Heinze]

It´s a self build AMD Duron @ 700 Mhz. The System runs SuSE Linux 8.2 
with up to date hot fixes installed.

René

Carter Bullard schrieb:

> what kind of machine is this?
> 
> 
> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Rene Heinze
> Sent: Friday, April 30, 2004 2:18 PM
> To: Carter Bullard
> Cc: argus-info at lists.andrew.cmu.edu
> Subject: Re: [ARGUS] Question about Traffic Accounting and Argus
> 
> Hi Carter,
> 
> I just downloaded the Argus 2.0.6. Unpacked it and moved it to
> /root/argus/argus-clients-2.0.6/. I started up "./configure", works
> fine. When starting "make" after the "./configure" it stops with the
> following error message:
> 
> ratop.c: At top level:
> ratop.c:2122: error: parse error before '*' token
> ratop.c: In function `RaUpdateWindow':
> ratop.c:2128: error: `A_NORMAL' undeclared (first use in this function)
> ratop.c:2129: error: `COLOR_WHITE' undeclared (first use in this function)
> ratop.c:2134: error: `queue' undeclared (first use in this function)
> ratop.c:2141: error: `COLS' undeclared (first use in this function)
> ratop.c:2268: error: `window' undeclared (first use in this function)
> /usr/include/bits/mathinline.h: At top level:
> ratop.h:70: error: storage size of `RaOrigTty' isn't known
> make[1]: *** [ratop.o] Error 1
> make[1]: Leaving directory `/root/argus/argus-clients-2.0.6/ratop'
> 
> There are some more error message on top of these I copied into the mail.
> 
> To make sure I deleted Argus 2.0.5 unpacked it and started up
> "./configure && make". No problems here. I have read the install file
> from the 2.0.6 version but found nothing that could help me.
> I´m not that experienced with compiling programs under linux and was
> happy that i´ve made the 2.0.5 with no trouble.
> Maybe someone can help :)
> 
> Greetings
> 
> René
> 
> Carter Bullard schrieb:
> 
> 
>>You should get the latest argus-clients programs.
>>ftp://qosient.com/dev/argus-2.0/argus-clients-2.0.6.tar.gz
>>
>>Carter
>>
>>-----Original Message-----
>>From: Rene Heinze [mailto:rhe at hup.de]
>>Sent: Friday, April 30, 2004 1:10 PM
>>To: Carter Bullard
>>Cc: argus-info at lists.andrew.cmu.edu
>>Subject: Re: [ARGUS] Question about Traffic Accounting and Argus
>>
>>Hi Carter,
>>
>>I can only use the Matrix or TopN Flag with "ramon -M". My version of
>>ramon (2.0.5) does not recognize "-M hostsrv". Maybe I´m doing something
>>wrong ?
>>
>>René
>>
>>Carter Bullard schrieb:
>>
>>
>>>Hey Rene,
>>>  Try this:
>>>     ramon -M hostsvc -N 25 -r /tmp/arguslos
>>>
>>>Carter
>>>
>>>
>>>
>>>-----Original Message-----
>>>From: owner-argus-info at lists.andrew.cmu.edu
>>>[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Rene Heinze
>>>Sent: Wednesday, April 28, 2004 8:27 AM
>>>To: Russell Fulton; argus-info at lists.andrew.cmu.edu
>>>Subject: Re: [ARGUS] Question about Traffic Accounting and Argus
>>>
>>>Hi,
>>>
>>>sorry for the late answer to your mail. Thanks for the hint that I can
>>>use the "-c" flag. Works great.
>>>Now I see the total amount of traffic from each host in the network. But
>>> I would like to see that traffic split up in the services used. I need
>>>to know if the traffic was p2p or http or ftp. Thats pretty important.
>>>Any ideas ?
>>>
>>>Thanks the support!
>>>
>>>René Heinze
>>>
>>>Russell Fulton schrieb:
>>>
>>>
>>>
>>>>On Fri, 2004-04-23 at 22:26, Rene Heinze wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>after that I played a bit with statistic funktions
>>>>>ramon -M TopN -N 25 -r /tmp/arguslos
>>>>>
>>>>>23 Apr 04 11:24:57     ip    194.77.59.20                 CON
>>>>>23 Apr 04 11:24:57     ip     google.de                 CON
>>>>>23 Apr 04 11:25:03     ip    194.77.59.25                 TIM
>>>>>23 Apr 04 11:29:05     ip    dict.leo.org                 CON
>>>>>23 Apr 04 11:29:52     ip    194.77.59.72                 TIM
>>>>>
>>>>>ramon -M Matrix -N 25 -r /tmp/arguslos
>>>>>
>>>>>23 Apr 04 11:30:12     ip    194.77.59.72              <->
>>>>>dict.leo.org              CON
>>>>>23 Apr 04 11:24:57     ip p508401f0.dip0.              <->
>>>>>194.77.59.36              CON
>>>>>
>>>>>Here I´m stucked. I do not know with what i should continue..
>>>>
>>>>
>>>>Ummm.... I'm not at all sure what the problem is.  If it is that you
>>>>want the traffic counts then add the -c flag to the ra* commands.
>>>>
>>>>
>>>
>>>
>>>
>>>
>>
>>
> 
> 
>