Argus - Cisco Netflow
CS Lee
geek00l at gmail.com
Tue Mar 13 13:29:30 EDT 2007
Carter,
After some testing, I have Cisco netflow version 5 imported properly, the
correct syntax to import Cisco Netflow v5 ( I haven't tested on other
version of netflow ) should be this -
ra -CP 1.2.3.4 -S 9995
Provided that you are exporting your netflow data to 1.2.3.4 and dst port
9995, you just need to run this, I haven't tried it on other argus clients
but since most of ra options are supported, I may think it work but I will
do further testing to see how it goes. But when I try to check on man page,
and the ra -h, I haven't found anything about -P, but rather confusing
result -
-C specify Cisco Netflow source
-S <host[:port]> specify remote argus and optional port number
<port> specify Cisco datagram port number.
Trying ra -C 1.2.3.4 -S 9995 won't work, so I think -P should be added so
that people can get it right easily. Cheers :)
About time for me to test radium, later all.
Cheers.
--
Best Regards,
CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070314/a0827661/attachment.html>
More information about the argus
mailing list