argus-3.0.0.rc.16.tar.gz available

[Carter Bullard]

Lots of bells and whistles in ratop().  the 'h' key does help a lot.

ratop() is a general aggregator, so it has most of the features
of racluster() built in.  So, if you wanted to modify the aggregation
on the fly, because there were too many flows, or you were interested
in a particular server or a remote subnet's activity with your network,
as examples, use the "m" key and change the flow key
identifiers.   (use the arrow keys to maneuver around in the field).

If you're looking at a remote argus, and your were interested
only in the class B subnet aggregate traffic, hit the 'm' key and
then backspace over everything, and type (assuming your looking
at only one probe's output):

    matrix/16

and then a carriage return.  The screen will clear and they you'll
see the subnet <-> subnet aggregate status up come.  the data is
aggregated as it comes in, so the stat will build.

type 'F' and just type 'srate drate' at the end of the line and you can
see the bps impact of each subnet.  Kinda cool.


Carter


On Jul 11, 2006, at 2:01 PM, Karl Tatgenhorst wrote:

>
>    Thanks a lot. I have not personally used the client routines on  
> sparc
> because only my test server(s) are sparc. I am running all the client
> programs on my desktop (Linux). I am especially pleased with how ratop
> looks and am looking forward to trying racluster.
>
> Karl
>
> On Tue, 2006-07-11 at 13:49 -0400, Carter Bullard wrote:
>> Gentle people,
>> I've uploaded new server and client release candidates.  These fix
>> the porting issues with Solaris.   I still have some printing issues
>> to fix,
>> as I haven't incorporated all of Peter's patches, but that's next.
>>
>> For Solaris users:  I had to change the routine that parses out the
>> RA_FIELD_SPECIFIER
>>       fields that can modify the default print format for ra*
>> programs.   If that is broken now,
>>       well, tough ;o)  No, no no, just kidding.  I had to replace
>> strsep() with the older strtok()
>>       routine, which is a big deal as its not reentrant.  Because I
>> didn't get chance to fully test
>>       the change, if we get some weird behavior, I'll need to change
>> the fix.
>>
>> Thanks for all the testing, and we're getting closer to some form of
>> release!!!
>>
>> Carter
>>
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20060711/d49a42dc/attachment.html>