Argus - Cisco Netflow

CS Lee geek00l at gmail.com
Tue Mar 13 13:29:30 EDT 2007


Carter,

After some testing, I have Cisco netflow version 5 imported properly, the
correct syntax to import Cisco Netflow v5 ( I haven't tested on other
version of netflow ) should be this -

ra -CP 1.2.3.4 -S 9995

Provided that you are exporting your netflow data to 1.2.3.4 and dst port
9995, you just need to run this, I haven't tried it on other argus clients
but since most of ra options are supported, I may think it work but I will
do further testing to see how it goes. But when I try to check on man page,
and the ra -h, I haven't found anything about -P, but rather confusing
result -

-C                    specify Cisco Netflow source
-S <host[:port]>      specify remote argus and optional port number
            <port>             specify Cisco datagram port number.

Trying ra -C 1.2.3.4 -S 9995 won't work, so I think -P should be added so
that people can get it right easily. Cheers :)

About time for me to test radium, later all.


Cheers.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070314/a0827661/attachment.html>


More information about the argus mailing list