mystery explained
Peter Van Epp
vanepp at sfu.ca
Fri Sep 1 17:55:02 EDT 2006
It appears the loss of capture data that I'm seeing is a PF_ring pcap
bug. If you start and stop a tcpdump on the same interfaces that argus is
listening on, the stop of tcpdump takes the interface out of promiscious mode
(leaving argus only seeing broadcasts ...). Something else to add to my list
of things to fix :-).
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list