netflow on clients.63?
Peter Van Epp
vanepp at sfu.ca
Sat Dec 15 15:36:56 EST 2007
Part of the problem seems to be that the supplied IP address doesn't
get used to set up the socket:
(gdb) s
ArgusGetServerSocket (input=0xf7f48008, timeout=5) at ./argus_client.c:2146
2146 struct addrinfo *hp = input->host;
(gdb) l
...
2258 int type = SOCK_DGRAM;
2259 if ((s = socket (AF_INET, type, 0)) >= 0) {
2260 struct sockaddr_in server;
2261 bzero(&server, sizeof(server));
2262
2263 if (input->addr.s_addr != 0)
2264 server.sin_addr.s_addr = htonl(input->addr.s_addr);
2265 else
2266 server.sin_addr.s_addr = INADDR_ANY;
2267
we select INADDR_ANY because input->addr.s_addr is indeed 0 (because
the host IP is in input->host and not input->addr.s_addr):
(gdb) print *input
$7 = {qhdr = {nxt = 0x0, prv = 0x0, queue = 0x0, lasttime = {
tv_sec = 1197749045, tv_usec = 669322}, logtime = {tv_sec = 0,
tv_usec = 0}}, queue = 0x0, index = -1, mode = 16, fd = -1, in = 0,
out = 0, offset = 0, major_version = 3, minor_version = 0, status = 16,
host = 0x101f5138, addr = {s_addr = 0}, ostart = -1, ostop = -1,
portnum = 1025, hostname = 0x0, filename = 0x0, file = 0x0, pipe = 0x0,
ArgusLocalNet = 0, ArgusNetMask = 0, ArgusID = 0, ArgusIDType = 0,
ArgusStartTime = {tv_sec = 0, tv_usec = 0}, ArgusLastTime = {tv_sec = 0,
tv_usec = 0}, ArgusTimeDrift = 0, ArgusMarInterval = 0, statbuf = {
st_dev = 0, st_ino = 0, st_mode = 0, st_nlink = 0, st_uid = 0, st_gid = 0,
st_rdev = 0, __pad2 = 0, st_size = 0, st_blksize = 0, st_blocks = 0,
st_atim = {tv_sec = 0, tv_nsec = 0}, st_mtim = {tv_sec = 0, tv_nsec = 0},
st_ctim = {tv_sec = 0, tv_nsec = 0}, __unused4 = 0, __unused5 = 0},
ArgusBufferLen = 0, ArgusReadBuffer = 0x0, ArgusConvBuffer = 0x0,
ArgusReadPtr = 0x0, ArgusConvPtr = 0x0, ArgusReadBlockPtr = 0x0,
ArgusReadSocketCnt = 0, ArgusReadSocketSize = 0, ArgusReadSocketState = 0,
ArgusReadCiscoVersion = 0, ArgusReadSocketNum = 0, ArgusReadSize = 0,
ArgusCiscoNetFlowParse = 0, ArgusInitCon = {hdr = {type = 180 '4',
cause = 16 '\020', len = 32}, ar_un = {mar = {status = 0,
argusid = 3849399755, localnet = 0, netmask = 0,
nextMrSequenceNum = 0, startime = {tv_sec = 1197749045, tv_usec = 0},
now = {tv_sec = 1197749045, tv_usec = 0}, major_version = 3 '\003',
minor_version = 0 '\0', interfaceType = 0 '\0',
---Type <return> to continue, or q <return> to quit---
interfaceStatus = 0 '\0', reportInterval = 0, argusMrInterval = 0,
pktsRcvd = 0, bytesRcvd = 0, drift = 0, records = 0, flows = 0,
dropped = 0, queue = 0, output = 0, clients = 0, bufs = 0, bytes = 0,
suserlen = 0, duserlen = 0, pad = {0, 0, 0}, thisid = 0,
record_len = 4294967295}, far = {flow = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {ipv6 = {
ip_src = {3849399755, 0, 0, 0}, ip_dst = {1197749045, 0,
1197749045, 0}, ip_p = 3, blank = 0, flow = 0, sport = 0,
dport = 0}, ip = {ip_src = 3849399755, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0, pad = 0},
mac = {ehdr = {ether_dhost = "eq-K\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {3849399755,
0, 0, 0}, ip_dst = {1197749045, 0, 1197749045, 0}, ip_p = 3,
blank = 0, flow = 0, type = 0 '\0', code = 0 '\0', id = 0},
icmp = {ip_src = 3849399755, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', type = 0 '\0', code = 0 '\0', id = 0, ip_id = 0},
igmpv6 = {ip_src = {3849399755, 0, 0, 0}, ip_dst = {1197749045, 0,
1197749045, 0}, ip_p = 3, blank = 0, flow = 0, type = 0 '\0',
code = 0 '\0', pad = 0}, igmp = {ip_src = 3849399755,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {ip_src = {
---Type <return> to continue, or q <return> to quit---
3849399755, 0, 0, 0}, ip_dst = {1197749045, 0, 1197749045, 0},
ip_p = 3, blank = 0, flow = 0, spi = 0}, esp = {
ip_src = 3849399755, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
pad = 0, spi = 0}, arp = {hrd = 58737, pro = 11723,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0, arp_tpa = 0,
haddr = {{ethernet = "Gd35\000",
ib = "Gd35\000\000\000\000Gd35\000\000\000\000\003", '\0' <repeats 14 times>, ieee1394 = "Gd35\000\000\000\000Gd35\000\000\000",
framerelay = "Gd35", tokenring = "Gd35\000", arcnet = "G",
fiberchannel = "Gd35\000\000\000\000Gd35",
atm = "Gd35\000\000\000\000Gd35\000\000\000\000\003\000\000"}}}, rarp = {hrd = 58737, pro = 11723, hln = 0 '\0', pln = 0 '\0', op = 0,
arp_tpa = 0, shaddr = {{ethernet = "\000\000\000\000Gd",
ib = "\000\000\000\000Gd35\000\000\000\000Gd35\000\000\000\000\003\000\000\000\000\000\000\000\000\000\000",
ieee1394 = "\000\000\000\000Gd35\000\000\000\000Gd35",
framerelay = "\000\000\000",
tokenring = "\000\000\000\000Gd", arcnet = "",
fiberchannel = "\000\000\000\000Gd35\000\000\000",
atm = "\000\000\000\000Gd35\000\000\000\000Gd35\000\000\000"}}, dhaddr = {{ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
---Type <return> to continue, or q <return> to quit---
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 58737,
hln = 45 '-', pln = 203 'K', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000Gd",
ib = "\000\000\000\000Gd35\000\000\000\000Gd35\000\000\000\000\003\000\000\000\000\000\000\000\000\000\000",
ieee1394 = "\000\000\000\000Gd35\000\000\000\000Gd35",
framerelay = "\000\000\000",
tokenring = "\000\000\000\000Gd", arcnet = "",
fiberchannel = "\000\000\000\000Gd35\000\000\000",
atm = "\000\000\000\000Gd35\000\000\000\000Gd35\000\000\000"}}}, larp = {arp_spa = 3849399755, arp_tpa = 0,
etheraddr = "\000\000\000\000\000", pad = 0}, lrarp = {
arp_tpa = 3849399755, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {
3849399755, 0, 0, 0}, ip_dst = {1197749045, 0, 1197749045, 0},
ip_p = 3, resv = 0, flow = 0, ip_id = 0}, frag = {
ip_src = 3849399755, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
pad = {0, 0}, ip_id = 0}}}}}}, ArgusManStart = {hdr = {
type = 0 '\0', cause = 0 '\0', len = 0}, ar_un = {mar = {status = 0,
argusid = 0, localnet = 0, netmask = 0, nextMrSequenceNum = 0,
startime = {tv_sec = 0, tv_usec = 0}, now = {tv_sec = 0, tv_usec = 0},
---Type <return> to continue, or q <return> to quit---
major_version = 0 '\0', minor_version = 0 '\0',
interfaceType = 0 '\0', interfaceStatus = 0 '\0', reportInterval = 0,
argusMrInterval = 0, pktsRcvd = 0, bytesRcvd = 0, drift = 0,
records = 0, flows = 0, dropped = 0, queue = 0, output = 0,
clients = 0, bufs = 0, bytes = 0, suserlen = 0, duserlen = 0, pad = {
0, 0, 0}, thisid = 0, record_len = 0}, far = {flow = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {
ipv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, ip_p = 0,
blank = 0, flow = 0, sport = 0, dport = 0}, ip = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0,
pad = 0}, mac = {ehdr = {ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, ip_p = 0, blank = 0, flow = 0,
type = 0 '\0', code = 0 '\0', id = 0}, icmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', id = 0, ip_id = 0}, igmpv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, ip_p = 0, blank = 0, flow = 0,
type = 0 '\0', code = 0 '\0', pad = 0}, igmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, ip_p = 0, blank = 0, flow = 0,
---Type <return> to continue, or q <return> to quit---
spi = 0}, esp = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0, arp_tpa = 0,
haddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, rarp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}, dhaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
---Type <return> to continue, or q <return> to quit---
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 0,
hln = 0 '\0', pln = 0 '\0', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, larp = {arp_spa = 0,
arp_tpa = 0, etheraddr = "\000\000\000\000\000", pad = 0},
lrarp = {arp_tpa = 0, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, ip_p = 0, resv = 0, flow = 0,
ip_id = 0}, frag = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = {0, 0}, ip_id = 0}}}}}},
ArgusOriginal = 0xf7f48570, ArgusGenerateRecordStructBuf = {qhdr = {
nxt = 0x0, prv = 0x0, queue = 0x0, lasttime = {tv_sec = 0, tv_usec = 0},
logtime = {tv_sec = 0, tv_usec = 0}}, status = 0, dsrindex = 0,
trans = 0, timeout = 0, idle = 0, bins = 0x0, htblhdr = 0x0,
hinthdr = 0x0, nsq = 0x0, input = 0x0, dsrs = {0x0 <repeats 19 times>},
correlates = 0x0, hdr = {type = 0 '\0', cause = 0 '\0', len = 0}, canon = {
hdr = {type = 0 '\0', cause = 0 '\0', len = 0}, flow = {hdr = {
---Type <return> to continue, or q <return> to quit---
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {
ipv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, ip_p = 0,
blank = 0, flow = 0, sport = 0, dport = 0}, ip = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0,
pad = 0}, mac = {ehdr = {ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, ip_p = 0, blank = 0, flow = 0,
type = 0 '\0', code = 0 '\0', id = 0}, icmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', id = 0, ip_id = 0}, igmpv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, ip_p = 0, blank = 0, flow = 0,
type = 0 '\0', code = 0 '\0', pad = 0}, igmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, ip_p = 0, blank = 0, flow = 0,
spi = 0}, esp = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0, arp_tpa = 0,
haddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
---Type <return> to continue, or q <return> to quit---
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, rarp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}, dhaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 0,
hln = 0 '\0', pln = 0 '\0', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
---Type <return> to continue, or q <return> to quit---
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, larp = {arp_spa = 0,
arp_tpa = 0, etheraddr = "\000\000\000\000\000", pad = 0},
lrarp = {arp_tpa = 0, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, ip_p = 0, resv = 0, flow = 0,
ip_id = 0}, frag = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = {0, 0}, ip_id = 0}}}, trans = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, srcid = {{
value = 0, ipv4 = 0}}, seqnum = 0}, time = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, src = {start = {tv_sec = 0,
tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}}, dst = {start = {
tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}}},
encaps = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, src = 0, dst = 0}, attr = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, src = {ttl = 0 '\0',
tos = 0 '\0', ip_id = 0, options = 0}, dst = {ttl = 0 '\0',
---Type <return> to continue, or q <return> to quit---
tos = 0 '\0', ip_id = 0, options = 0}}, metric = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
pkts = 0, bytes = 0, appbytes = 0}, dst = {pkts = 0, bytes = 0,
appbytes = 0}}, net = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, net_union = {tcpinit = {status = 0,
seqbase = 0, options = 0, win = 0, flags = 0 '\0',
winshift = 0 '\0'}, tcpstatus = {status = 0, src = 0 '\0',
dst = 0 '\0', pad = "\000"}, tcp = {status = 0, state = 0,
options = 0, synAckuSecs = 0, ackDatauSecs = 0, src = {lasttime = {
tv_sec = 0, tv_usec = 0}, status = 0, seqbase = 0, seq = 0,
ack = 0, winnum = 0, bytes = 0, retrans = 0, ackbytes = 0,
state = 0, win = 0, winbytes = 0, flags = 0 '\0',
winshift = 0 '\0'}, dst = {lasttime = {tv_sec = 0, tv_usec = 0},
status = 0, seqbase = 0, seq = 0, ack = 0, winnum = 0,
bytes = 0, retrans = 0, ackbytes = 0, state = 0, win = 0,
winbytes = 0, flags = 0 '\0', winshift = 0 '\0'}}, icmp = {
icmp_type = 0 '\0', icmp_code = 0 '\0', iseq = 0, osrcaddr = 0,
odstaddr = 0, isrcaddr = 0, idstaddr = 0, igwaddr = 0}, icmpv6 = {
icmp_type = 0 '\0', icmp_code = 0 '\0', cksum = 0}, rtp = {
state = 0, src = {rh_ver = 0 '\0', rh_p = 0 '\0', rh_x = 0 '\0',
rh_cc = 0 '\0', rh_mark = 0 '\0', rh_pt = 0 '\0', rh_seq = 0,
---Type <return> to continue, or q <return> to quit---
rh_time = 0, rh_ssrc = 0}, dst = {rh_ver = 0 '\0',
rh_p = 0 '\0', rh_x = 0 '\0', rh_cc = 0 '\0', rh_mark = 0 '\0',
rh_pt = 0 '\0', rh_seq = 0, rh_time = 0, rh_ssrc = 0},
sdrop = 0, ddrop = 0, ssdev = 0, dsdev = 0}, rtcp = {src = {
rh_ver = 0 '\0', rh_p = 0 '\0', rh_rc = 0 '\0', rh_pt = 0 '\0',
rh_len = 0, rh_ssrc = 0}, dst = {rh_ver = 0 '\0', rh_p = 0 '\0',
rh_rc = 0 '\0', rh_pt = 0 '\0', rh_len = 0, rh_ssrc = 0},
sdrop = 0, ddrop = 0}, igmp = {igmp_type = 0 '\0',
igmp_code = 0 '\0', igmp_group = 0, jdelay = {tv_sec = 0,
tv_usec = 0}, ldelay = {tv_sec = 0, tv_usec = 0}}, dhcp = {
respaddr = 0}, esp = {status = 0, spi = 0, lastseq = 0,
lostseq = 0}, arp = {respaddr = "\000\000\000\000\000", pad = 0},
ah = {src_spi = 0, dst_spi = 0, src_replay = 0, dst_replay = 0},
frag = {fragnum = 0, frag_id = 0, totlen = 0, currlen = 0,
maxfraglen = 0, pad = 0}}}, mac = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, mac_union = {ether = {ehdr = {
ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}}}, vlan = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, sid = 0, did = 0}, mpls = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
---Type <return> to continue, or q <return> to quit---
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}},
slabel = 0, dlabel = 0}, icmp = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, icmp_type = 0 '\0',
icmp_code = 0 '\0', iseq = 0, osrcaddr = 0, odstaddr = 0,
isrcaddr = 0, idstaddr = 0, igwaddr = 0}, agr = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, count = 0, laststartime = {
tv_sec = 0, tv_usec = 0}, lasttime = {tv_sec = 0, tv_usec = 0},
act = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}, idle = {
n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}}, cor = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, srcid = {{
value = 0, ipv4 = 0}}, deltaDur = 0, deltaStart = 0,
deltaLast = 0}, jitter = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, act = {src = {n = 0, minval = 0, meanval = 0,
stdev = 0, maxval = 0}, dst = {n = 0, minval = 0, meanval = 0,
stdev = 0, maxval = 0}}, idle = {src = {n = 0, minval = 0,
meanval = 0, stdev = 0, maxval = 0}, dst = {n = 0, minval = 0,
meanval = 0, stdev = 0, maxval = 0}}}, psize = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
---Type <return> to continue, or q <return> to quit---
psizemin = 0, psizemax = 0}, dst = {psizemin = 0, psizemax = 0}},
cocode = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, src = "\000", dst = "\000"}, data = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, size = 0,
count = 0, array = "\000\000\000\000\000\000\000"}}, srate = 0,
drate = 0, sload = 0, dload = 0, dur = 0, avgdur = 0, sploss = 0,
dploss = 0, offset = 0},
ArgusOriginalBuffer = '\0' <repeats 262143 times>,
ArgusSrcUserData = '\0' <repeats 65535 times>,
ArgusDstUserData = '\0' <repeats 65535 times>}
(gdb)
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list