[ARGUS] Question about Traffic Accounting and Argus

[Carter Bullard]

Wow!!!
Thanks Peter
Carter

-----Original Message-----
From: owner-argus-info at lists.andrew.cmu.edu
[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Peter Van Epp
Sent: Friday, April 30, 2004 4:35 PM
To: argus-info at lists.andrew.cmu.edu
Subject: Re: [ARGUS] Question about Traffic Accounting and Argus

	Try installing the rpms for

ncurses-5.3-115
ncurses-devel-5.3-115

(or approriate version for Suse 8.2, this is on Suse 9.0) and then do

ln -s /usr/lib/libncurses.so /usr/lib/libcurses.so and then it should make.

Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada


On Fri, Apr 30, 2004 at 09:09:37PM +0200, Rene Heinze wrote:
> It´s a self build AMD Duron @ 700 Mhz. The System runs SuSE Linux 8.2
> with up to date hot fixes installed.
>
> René
>
> Carter Bullard schrieb:
>
> >what kind of machine is this?
> >
> >
> >-----Original Message-----
> >From: owner-argus-info at lists.andrew.cmu.edu
> >[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Rene Heinze
> >Sent: Friday, April 30, 2004 2:18 PM
> >To: Carter Bullard
> >Cc: argus-info at lists.andrew.cmu.edu
> >Subject: Re: [ARGUS] Question about Traffic Accounting and Argus
> >
> >Hi Carter,
> >
> >I just downloaded the Argus 2.0.6. Unpacked it and moved it to
> >/root/argus/argus-clients-2.0.6/. I started up "./configure", works
> >fine. When starting "make" after the "./configure" it stops with the
> >following error message:
> >
> >ratop.c: At top level:
> >ratop.c:2122: error: parse error before '*' token
> >ratop.c: In function `RaUpdateWindow':
> >ratop.c:2128: error: `A_NORMAL' undeclared (first use in this function)
> >ratop.c:2129: error: `COLOR_WHITE' undeclared (first use in this
function)
> >ratop.c:2134: error: `queue' undeclared (first use in this function)
> >ratop.c:2141: error: `COLS' undeclared (first use in this function)
> >ratop.c:2268: error: `window' undeclared (first use in this function)
> >/usr/include/bits/mathinline.h: At top level:
> >ratop.h:70: error: storage size of `RaOrigTty' isn't known
> >make[1]: *** [ratop.o] Error 1
> >make[1]: Leaving directory `/root/argus/argus-clients-2.0.6/ratop'
> >
> >There are some more error message on top of these I copied into the mail.
> >
> >To make sure I deleted Argus 2.0.5 unpacked it and started up
> >"./configure && make". No problems here. I have read the install file
> >from the 2.0.6 version but found nothing that could help me.
> >I´m not that experienced with compiling programs under linux and was
> >happy that i´ve made the 2.0.5 with no trouble.
> >Maybe someone can help :)
> >
> >Greetings
> >
> >René
> >
> >Carter Bullard schrieb:
> >
> >
> >>You should get the latest argus-clients programs.
> >>ftp://qosient.com/dev/argus-2.0/argus-clients-2.0.6.tar.gz
> >>
> >>Carter
> >>
> >>-----Original Message-----
> >>From: Rene Heinze [mailto:rhe at hup.de]
> >>Sent: Friday, April 30, 2004 1:10 PM
> >>To: Carter Bullard
> >>Cc: argus-info at lists.andrew.cmu.edu
> >>Subject: Re: [ARGUS] Question about Traffic Accounting and Argus
> >>
> >>Hi Carter,
> >>
> >>I can only use the Matrix or TopN Flag with "ramon -M". My version of
> >>ramon (2.0.5) does not recognize "-M hostsrv". Maybe I´m doing something
> >>wrong ?
> >>
> >>René
> >>
> >>Carter Bullard schrieb:
> >>
> >>
> >>>Hey Rene,
> >>> Try this:
> >>>    ramon -M hostsvc -N 25 -r /tmp/arguslos
> >>>
> >>>Carter
> >>>
> >>>
> >>>
> >>>-----Original Message-----
> >>>From: owner-argus-info at lists.andrew.cmu.edu
> >>>[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Rene Heinze
> >>>Sent: Wednesday, April 28, 2004 8:27 AM
> >>>To: Russell Fulton; argus-info at lists.andrew.cmu.edu
> >>>Subject: Re: [ARGUS] Question about Traffic Accounting and Argus
> >>>
> >>>Hi,
> >>>
> >>>sorry for the late answer to your mail. Thanks for the hint that I can
> >>>use the "-c" flag. Works great.
> >>>Now I see the total amount of traffic from each host in the network.
But
> >>>I would like to see that traffic split up in the services used. I need
> >>>to know if the traffic was p2p or http or ftp. Thats pretty important.
> >>>Any ideas ?
> >>>
> >>>Thanks the support!
> >>>
> >>>René Heinze
> >>>
> >>>Russell Fulton schrieb:
> >>>
> >>>
> >>>
> >>>>On Fri, 2004-04-23 at 22:26, Rene Heinze wrote:
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>after that I played a bit with statistic funktions
> >>>>>ramon -M TopN -N 25 -r /tmp/arguslos
> >>>>>
> >>>>>23 Apr 04 11:24:57     ip    194.77.59.20                 CON
> >>>>>23 Apr 04 11:24:57     ip     google.de                 CON
> >>>>>23 Apr 04 11:25:03     ip    194.77.59.25                 TIM
> >>>>>23 Apr 04 11:29:05     ip    dict.leo.org                 CON
> >>>>>23 Apr 04 11:29:52     ip    194.77.59.72                 TIM
> >>>>>
> >>>>>ramon -M Matrix -N 25 -r /tmp/arguslos
> >>>>>
> >>>>>23 Apr 04 11:30:12     ip    194.77.59.72              <->
> >>>>>dict.leo.org              CON
> >>>>>23 Apr 04 11:24:57     ip p508401f0.dip0.              <->
> >>>>>194.77.59.36              CON
> >>>>>
> >>>>>Here I´m stucked. I do not know with what i should continue..
> >>>>
> >>>>
> >>>>Ummm.... I'm not at all sure what the problem is.  If it is that you
> >>>>want the traffic counts then add the -c flag to the ra* commands.
> >>>>
> >>>>
> >>>
> >>>
> >>>
> >>>
> >>
> >>
> >
> >
> >