And finally the test procdure (and initial results):

Carter Bullard carter at qosient.com
Mon Jun 19 17:25:46 EDT 2006


Hey Peter,
    What a great test!!!!!    argus-3.0 has 132 printable fields, and  
so I'm applying
your approach to test all of them at once, which is now causing me to  
have to
fix yet another segmentation fault!!!!

So, we have some field name changes,  I'd rather not put back the old
names, because in some cases we don't support the old function.  I've
removed fields that print 2 fields, as we now sort and merge on many of
these fields, and having to specify either the source or the destination
is important,  so I split them.   Some of the multiple field keywords  
are
still there, but I should remove them for completeness.  As as example,
'win' is now 'swin' and 'dwin', and win by itself doesn't work, but  
'mac'
by itself is still there, (definately a mistake).  I'll see if I can  
generate
the list here:

    Single field converted to 's' and 'd':
       win
       pkts
       bytes
       load
       loss
       rate
       mac
       mpls
       vlan
       ipid
       user

    Field name change:
       ind       -   flgs    print flags
       status  -   state  print status

This seems like a good list.

    OK, so we're not picking up the IP attributes from the 2.0  
records, ttl, tos, ipid,
and options.  we have the bps values, not sure why we're not printing  
them out,
probably looking for a specific DSR structure and the pointer may not be
there.   The rest looks good, because we need to correct for the name  
changes?

Carter



On Jun 19, 2006, at 2:20 PM, Peter Van Epp wrote:

> ra -F ra2.conf.full -r t.argus
> StartTime,LastTime,Trans,Dur,AvgDur,SrcAddr,DstAddr,Type,Sport,Dport,S 
> rcTOS,DstTOS,SrcTTL,DstTTL,SrcBytes,DstBytes,SrcPkt,DstPkt,Src_bps,Dst 
> _bps,Src_Loss,Dst_Loss,Src_pps,Dst_pps,ProbeId,Flgs,SrcMacAddr,DstMacA 
> ddr,Dir,SrcJitter,DstJitter,State,srcUdata,dstUdata,SrcWin,DstWin,Seq, 
> sMPLS,dMPLS,sVLAN,dVLAN,IpId
> 1132974665.005254,1132974683.159241,,18.153987,18.153987,229.97.122.20 
> 3,1,man,v2.0,0,0,0,0,0,0,0,0,0,-0.00,-0.00,,0.00,0.00,3848370891,,,,,0 
> .000,0.000,STA,,,,,0,,,,,
> 1149490800.390902,1149490800.392313,1,0.001411,0.001411,206.127.21.254 
> ,142.58.207.207,udp, 
> 65442,123,0,16,46,61,90,90,1,1,510276.40,510276.40,0.0000,0.0000,0.00, 
> 0.00,3848370891,,0:90:69:c0:e0:1f,0:e0:63:13:7e:0,<->, 
> 0.000,0.000,CON,,,,,1307546097,,,,,0xbc5f
>
>
> %ra3 -F ra3.conf.full -n -r t.argus
> StartTime,LastTime,Trans,Dur,AvgDur,SrcAddr,DstAddr,Proto,Sport,Dport, 
> sTos,dTos,sTtl,dTtl,SrcBytes,DstBytes,SrcPkts,DstPkts,Src_pps,Dst_pps, 
> SrcLoss,DstLoss,Src_bps,Dst_bps,SrcId,SrcMac,DstMac,Dir,SrcJitter,DstJ 
> itter,srcUdata,dstUdata,SrcWin,DstWin,Seq,sMpls[0],dMpls 
> [0],sVlan,dVlan,sIpId,dIpId
> 1149490800.390902,1149490800.392313,1,0.001411,0.001411,206.127.21.254 
> ,142.58.207.207,udp,65442,123, , , , , 
> 90,90,1,1,708.717,708.717,0,0,510276.375,510276.375,229.97.122.203,0:9 
> 0:69:c0:e0:1f,0:e0:63:13:7e:0,<->,,,,, , ,1307546097 ,  , ,
>
>




More information about the argus mailing list