Reading pcap

[CS Lee]

Carter,

If i generate argus file from pcap, even if I enable everything in
argus.conf and running it with -F argus.conf, apparently some of the flow
attributes still missing, so my question is can i retrieve all the possible
flow attributes ust by generating argus file from pcap or there will be
differences of capturing argus data directly comparing to generating argus
data from pcap.

Thanks.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070410/528762f0/attachment.html>