Reading pcap

CS Lee geek00l at gmail.com
Tue Apr 10 07:00:02 EDT 2007


Carter,

If i generate argus file from pcap, even if I enable everything in
argus.conf and running it with -F argus.conf, apparently some of the flow
attributes still missing, so my question is can i retrieve all the possible
flow attributes ust by generating argus file from pcap or there will be
differences of capturing argus data directly comparing to generating argus
data from pcap.

Thanks.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070410/528762f0/attachment.html>


More information about the argus mailing list