minor rc31 issue
MN
mnewton at stanford.edu
Wed Oct 18 17:55:32 EDT 2006
Hi - two related issues:
$ /usr/local/src/argus-clients-3.0.0.rc.32/bin/ra --help
Ra Version 3.0.0.rc.32
usage: ra
usage: ra [options] -S remoteServer [- filter-expression]
usage: ra [options] -r argusDataFile [- filter-expression]
options: -A print record summaries on termination.
[...]
-s [-][+[#]]field specify fields to print.
fields: srcid, stime, ltime, trans, seq, flgs, dur, avgdur, mindur, maxdur,
saddr, daddr, proto, sport, dport, sipid, dipid,
stos, dtos, sttl, dttl, bytes, sbytes, dbytes, pkts, spkts, dpkts
load, sload, dload, loss, sloss, dloss, rate, srate, drate,
smac, dmac, dir, jit, sjit, djit, status, suser, duser
^^^^^^
swin, dwin, svlan, dvlan, svid, dvid, svpri, dvpri, smpls, dmpls.
1: but instead of 'status' it should be 'state'.
2: if you put anything else in (say 'xyzzy') it takes it w/o complaint.
Thanks,
- mike
More information about the argus
mailing list