Problem with tcpdump filters
    Alaios 
    alaios at yahoo.com
       
    Tue Dec 21 09:42:18 EST 2004
    
    
  
Hi... I face a problem with the argus and the filter
that i need to apply...
The following command 
tcpdump -i eth4 -vv ip[1]==0x28 with the filter works
fine..
The problem is that i cannot apply it to argus...
argus -d -M 0.01 -S 0.01 -i $1   -w my-AF1 ip[1]==0x28
returns no packet...
I think that the problem is argus-oriented.. because
the ra give me packets but ends with a no data seen
message
e.x
....
skipped a bunch of lines
04-12-21 16:41:04.496108        0.200060          man 
pkts       604  bytes       629368  drops     0  flows
   3         closed       0           CON
04-12-21 16:41:04.696168        0.200053          man 
pkts       714  bytes       743988  drops     0  flows
   3         closed       0           CON
No data seen.
Plz suggest me something as fast a u can
__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
    
    
More information about the argus
mailing list