minor rc31 issue

MN mnewton at stanford.edu
Wed Oct 18 17:55:32 EDT 2006


Hi - two related issues:

$ /usr/local/src/argus-clients-3.0.0.rc.32/bin/ra --help
Ra Version 3.0.0.rc.32
usage: ra
usage: ra [options] -S remoteServer  [- filter-expression]
usage: ra [options] -r argusDataFile [- filter-expression]

options: -A                 print record summaries on termination.
 [...]
         -s [-][+[#]]field  specify fields to print.
                   fields:  srcid, stime, ltime, trans, seq, flgs, dur, avgdur, mindur, maxdur,
                            saddr, daddr, proto, sport, dport, sipid, dipid,
                            stos, dtos, sttl, dttl, bytes, sbytes, dbytes, pkts, spkts, dpkts
                            load, sload, dload, loss, sloss, dloss, rate, srate, drate,
                            smac, dmac, dir, jit, sjit, djit, status, suser, duser
                                                              ^^^^^^
                            swin, dwin, svlan, dvlan, svid, dvid, svpri, dvpri, smpls, dmpls.

1: but instead of 'status' it should be 'state'.

2: if you put anything else in (say 'xyzzy') it takes it w/o complaint.

Thanks,
- mike




More information about the argus mailing list