argus icmp v6 filter

[CS Lee]

Hi Carter,

The syntax error -

ra[8024]: 20:00:59.336109 ipv6-icmp filter syntax error

While using proto 58 works.

Thanks

On Nov 19, 2007 7:55 PM, Carter Bullard <carter at qosient.com> wrote:

> What does no success mean?  Do you get a syntax error?
>
> Carter
>
> Carter Bullard
> QoSient LLC
> 150 E. 57th Street Suite 12D
> New York, New York 10022
> +1 212 588-9133 Phone
> +1 212 588-9134 Fax
>
> -----Original Message-----
> From: "CS Lee" <geek00l at gmail.com>
>
> Date: Sun, 18 Nov 2007 15:55:47
> To:Argus <argus-info at lists.andrew.cmu.edu>
> Subject: [ARGUS] argus icmp v6 filter
>
>
> Hi Carter,
>
> I try to filter icmp version 6 from argus stream but has no success using
> this filter which is in the /etc/protocols -
>
> ipv6-icmp
>
> If I just filter ipv6 traffic with
>
> ra - ipv6
>
> This works, or I have to use the number for icmpv6 which is
>
> ra - proto 58
>
> However I don't think number is easy to remember so I still prefer to go
> for name.
>
> Sorry to annoy you again but thanks ;]
>
>
>
> --
> Best Regards,
>
> CS Lee<geekooL[at]gmail.com>
>
> http://geek00l.blogspot.com <http://geek00l.blogspot.com>
>



-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>

http://geek00l.blogspot.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20071119/13318132/attachment.html>