latest argus?

[Peter Van Epp]

	I'm in! I need to update my multi OS test box since all its versions
will be 2 years out of date but its still sitting on the rack behind me :-).
	I don't have any IP V6 yet but it sounds like other folks do and my
HPC folks have both Opterons for 64 bit and a PowerPC Xserve that they think 
they have fought SUSE Linux on to for a development box for their AIX cluster
but I know they really want me to use as an argus sensor (after I talk Lixin
into putting the ring buffer code on it :-)). So as usual that covers off 
Free/Net/OpenBSD and MAC OS 10.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada

On Thu, Mar 09, 2006 at 08:58:19AM -0500, Carter Bullard wrote:
> Hey Peter,
> Thanks, that was a great way of putting it, I believe.  I have been  
> slightly
> hesitant to 'annouce' argus-3.0, for many reasons, but it is done and
> ready to test.   With the announcement that CERT has included support
> for argus-2.0 in their Silk tools, and the work that NCSA is doing with
> visualization and argus-2.0, its hard to move to a major version  
> release,
> as it will have an impact, but its also very hard to put work into  
> 2.0, when
> you've got 3.0 pretty much ready to go.
> 
> I've also been hesitant because of the time it will take to document
> 3.0.  It principally adds IPv6 support, better encapsulation parsing,  
> 64-bit
> support, Cygwin support and 64 bit counters, as well as a hundred  
> thousand
> little nits and small changes that will probably drive everyone  
> crazy.  It has
> the same SASL problems as argus-2.0, so there is an opportunity for some
> development if someone is interested in improving.
> 
> I have just had the last of my foot surgeries (had a bunch of screws
> finally removed), and so I'm not as productive as I need to be;  down  
> but
> not out, so to speak.  If there is real interest in testing and  
> improving on
> argus-3.0, then I will make it available.   Need to see a show of hands,
> if there is critical mass.  If not critical mass then I will let it  
> go in April/May
> sometime.
> 
> Best Regards,
> 
> Carter
> 
>