Fwd: Oops forgot the .tcp file ...

[Carter Bullard]

Begin forwarded message:

> From: Carter Bullard <carter at qosient.com>
> Date: October 30, 2006 1:14:12 PM EST
> To: Peter Van Epp <vanepp at sfu.ca>
> Subject: Re: Oops forgot the .tcp file ...
>
> Hey Peter,
> So the problem with your ICMP packets not generating flows is that  
> the snaplen
> for the packets didn't capture the complete icmp hdr, so we bail on  
> parsing.
> I break out of the packet parsing loop when the ICMP parsing is  
> done, and
> because the packet hdr is truncated, I don't return a flow key to  
> match.
>
> I'll fix this, not a problem.
>
> Carter
>
>
> On Oct 28, 2006, at 11:02 PM, Peter Van Epp wrote:
>
>> 	So include it here.
>>
>> Peter Van Epp / Operations and Technical Support
>> Simon Fraser University, Burnaby, B.C. Canada
>>
>> <icmp.tcp>
>
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20061030/e5458947/attachment.html>