argus icmp v6 filter

[Carter Bullard]

What does no success mean?  Do you get a syntax error?  

Carter

Carter Bullard
QoSient LLC
150 E. 57th Street Suite 12D
New York, New York 10022
+1 212 588-9133 Phone
+1 212 588-9134 Fax

-----Original Message-----
From: "CS Lee" <geek00l at gmail.com>

Date: Sun, 18 Nov 2007 15:55:47 
To:Argus <argus-info at lists.andrew.cmu.edu>
Subject: [ARGUS] argus icmp v6 filter


Hi Carter,

I try to filter icmp version 6 from argus stream but has no success using this filter which is in the /etc/protocols -

ipv6-icmp

If I just filter ipv6 traffic with 

ra - ipv6

This works, or I have to use the number for icmpv6 which is 

ra - proto 58

However I don't think number is easy to remember so I still prefer to go for name.

Sorry to annoy you again but thanks ;]



-- 
Best Regards,

CS Lee<geekooL[at]gmail.com> 

http://geek00l.blogspot.com <http://geek00l.blogspot.com>