ipv6 address cut?

Carter Bullard carter at qosient.com
Thu Apr 10 09:26:01 EDT 2008


Hey Dikshie,
Yes Pablo is right. Your field width for printing argus data is too
short for the IPv6 address.  I know this from the '*' that is at the end
of the field.

Increase the field width on your saddr and daddr fields to something  
like 28,
in your .rarc file.  Something like:

RA_FIELD_SPECIFIER="stime flgs proto saddr:28 sport dir daddr:28 dport  
spkts dpkts sbytes dbytes state"

Carter




On Apr 10, 2008, at 7:22 AM, Pablo J. Rebollo wrote:

> Argus might be truncating the address.
>
> http://article.gmane.org/gmane.network.argus/5935/match=re+argus+racluster+packet+byte+counts+off
>
> Regards,
>
> Pablo J. Rebollo
>
> dikshie wrote:
>> Hi,
>> i use ra to read my argus data and i see ipv6 not fully display.
>> for example:
>> 19:10:42.048776    19:10:42.048776 2001:xxx:y:8803:2*
>> 2001:ttt:rrr:u:23*   0.000000         94
>>
>> any clue?
>>
>>
>> regards,
>>
>
>




More information about the argus mailing list