directions and TransRefNum

[Peter Van Epp]

On Fri, Jun 10, 2005 at 02:52:07PM -0400, Carter Bullard wrote:
<snip>
> 
>    If you were to run ragator() using this input, it would merge
> your records into a single argus record with the directions correct.
> 
> Carter
> 
	Thats what I thought but fixes.1 doesn't seem to (unless there is 
something else odd about this one:

	Any insight in to why this doesn't become a flow? It looks to be because
it times out (DNS is returning server failure after a while), but I'd then 
expect ragator to catch and fix it but it doesn't seem to:

ra -r bad1.argus -nn
06 May 05 13:59:02           man  229.97.122.203  v2.0                   1 0     0        0         0            0           STA
05 May 05 13:47:38           udp   206.12.16.105.49338  ->    142.58.103.1.53    1        0         69           0           INT
05 May 05 13:48:08           udp    142.58.103.1.53     ->   206.12.16.105.49338 1        0         69           0           INT
06 May 05 13:59:02           man  229.97.122.203  v2.0                   3 0     2        0         138          2           SHT

 -r bad1.argus -nn

vanepp at r2d2% ragator  -r bad1.argus -nn
05 May 05 13:47:38           udp   206.12.16.105.49338  ->    142.58.103.1.53    1        0         69           0           INT
05 May 05 13:48:08           udp    142.58.103.1.53     ->   206.12.16.105.49338 1        0         69           0           INT

begin 644 bad1.tcpd
MU,.RH0(`!````````````&`````!````:H9Z0OE&`@!%````10````"0:;CX
M?@`%,7 at H"@@`10``-P<A```_$:#DS at P0:8XZ9P'`N@`U`"-@/:FL`0```0``
M``````5V:6%N=`-C;VT```\``8B&>D*81P0`10```$4`````!3%X*`H`D&FX
M^'X(`$4``#?!RT``^Q'J.(XZ9P'.#!!I`#7`N@`CW[JIK(&"``$````````%
.=FEA;G0#8V]M```/``$`
`
end

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada