Argus-info Digest, Vol 10, Issue 37

[CS Lee]

Just try to run racluster on my argus file, however I get this result. Just
out of curiosity the protocol field should be refer to the one in ip header
which is one byte, or I maybe wrong  -

racluster -nn -r /nsm/nsm-fcd.pcap.argus -m proto -s proto
     88
     41
     17
      6
      1
  24578
      0
   2054

racluster -r /nsm/nsm-fcd.pcap.argus -m proto -s proto
  eigrp
   ipv6
    udp
    tcp
   icmp
  decrc
    llc
    arp


-- 
Best Regards,

CS Lee<geek00L[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20060622/3e385975/attachment.html>