racount -M proto not working

Robin Gruyters r.gruyters at yirdis.nl
Fri Jun 23 03:16:07 EDT 2006


Hello (again),

I found this feature in the manual of racount:

[...]
        racount -M proto -r argus.file
        racount    records       total_pkts         src_pkts          
dst_pkts      total_bytes        src_bytes        dst_bytes
            tcp         47              777              405            
    372           119782            66541            53241
            udp        135              180              137            
     43            35987            20466            15521
           icmp         18               47               40            
      7             3318             2814              504
             ip         50               50               50            
      0             3000             3000                0
            arp         29               58               29            
     29             3480             1740             1740
            sum        279             1246              719            
    527           177807            99425            78382
[...]

When I try this, it doesn't work

[...]
$ racount -M proto -r  
/data1/argus/archive/2006/06/23/argus.2006.06.23.00.00.00.bz2
racount   records     total_pkts     src_pkts       dst_pkts        
total_bytes        src_bytes          dst_bytes
     sum   36519       456513         455297         1216            
517115093          515645026          1470067
[...]

Regards,

Robin Gruyters
Network and Security Engineer
Yirdis B.V.
I: http://yirdis.com
P: +31 (0)36 5300394
F: +31 (0)36 5489119



More information about the argus mailing list