[ARGUS] ragator flowfile format change?

Carter Bullard carter at qosient.com
Mon May 10 09:18:43 EDT 2004


Hey Roman,
   The basic formats should still be the same, (with the exception of the
'ip',
although it's suppose to handle the case where it's not there).  Could you
send a sample ragator file that demonstrates your problem?

Carter



-----Original Message-----
From: owner-argus-info at lists.andrew.cmu.edu
[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Roman Festchook
Sent: Monday, May 10, 2004 9:04 AM
To: argus-info at lists.andrew.cmu.edu
Subject: [ARGUS] ragator flowfile format change?

Hello!
Today has some time to test argus 2.0.6 and clients-2.0.6 as upgrade from
argus-2.0.6rc2 version. I use ragator to agregate flows after user session
ended. After installing new ragator it stop works with my flowfile -
reported
sintacs error. After some changes in flowfile rules (add 'ip' after label
id)
ragator parse and load flowfile correctly but doesnt use this rules to
agregate flows.
Is there any information about changes in ragator flowrules file format?

--
Roman Festchook
Network Engineer
RF2-UANIC FRA11-RIPE







More information about the argus mailing list