ipv6 address cut?
    Carter Bullard 
    carter at qosient.com
       
    Thu Apr 10 09:26:01 EDT 2008
    
    
  
Hey Dikshie,
Yes Pablo is right. Your field width for printing argus data is too
short for the IPv6 address.  I know this from the '*' that is at the end
of the field.
Increase the field width on your saddr and daddr fields to something  
like 28,
in your .rarc file.  Something like:
RA_FIELD_SPECIFIER="stime flgs proto saddr:28 sport dir daddr:28 dport  
spkts dpkts sbytes dbytes state"
Carter
On Apr 10, 2008, at 7:22 AM, Pablo J. Rebollo wrote:
> Argus might be truncating the address.
>
> http://article.gmane.org/gmane.network.argus/5935/match=re+argus+racluster+packet+byte+counts+off
>
> Regards,
>
> Pablo J. Rebollo
>
> dikshie wrote:
>> Hi,
>> i use ra to read my argus data and i see ipv6 not fully display.
>> for example:
>> 19:10:42.048776    19:10:42.048776 2001:xxx:y:8803:2*
>> 2001:ttt:rrr:u:23*   0.000000         94
>>
>> any clue?
>>
>>
>> regards,
>>
>
>
    
    
More information about the argus
mailing list