mystery explained

Peter Van Epp vanepp at sfu.ca
Fri Sep 1 17:55:02 EDT 2006


	It appears the loss of capture data that I'm seeing is a PF_ring pcap
bug. If you start and stop a tcpdump on the same interfaces that argus is
listening on, the stop of tcpdump takes the interface out of promiscious mode
(leaving argus only seeing broadcasts ...). Something else to add to my list
of things to fix :-).

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada



More information about the argus mailing list