ipv6 address cut?
Carter Bullard
carter at qosient.com
Thu Apr 10 09:26:01 EDT 2008
Hey Dikshie,
Yes Pablo is right. Your field width for printing argus data is too
short for the IPv6 address. I know this from the '*' that is at the end
of the field.
Increase the field width on your saddr and daddr fields to something
like 28,
in your .rarc file. Something like:
RA_FIELD_SPECIFIER="stime flgs proto saddr:28 sport dir daddr:28 dport
spkts dpkts sbytes dbytes state"
Carter
On Apr 10, 2008, at 7:22 AM, Pablo J. Rebollo wrote:
> Argus might be truncating the address.
>
> http://article.gmane.org/gmane.network.argus/5935/match=re+argus+racluster+packet+byte+counts+off
>
> Regards,
>
> Pablo J. Rebollo
>
> dikshie wrote:
>> Hi,
>> i use ra to read my argus data and i see ipv6 not fully display.
>> for example:
>> 19:10:42.048776 19:10:42.048776 2001:xxx:y:8803:2*
>> 2001:ttt:rrr:u:23* 0.000000 94
>>
>> any clue?
>>
>>
>> regards,
>>
>
>
More information about the argus
mailing list