ra output "man"
Carter Bullard
carter at qosient.com
Wed Feb 13 22:44:43 EST 2008
Hey Stewart,
There are the periodic managment records, which are coming from argus
itself.
Things like number of flows tracked, number of clients attached, total
bytes
total packets, interface drops, that sort of thing.
I turned on man record print by default to work on them, and to get
people
to tell me what they wanted in them, but most people really just want
them
out of the way. You can suppress them with a 'not man" filter, or, if
there
is concensus, I'll turn them off by default again.
Carter
On Feb 13, 2008, at 9:21 PM, Stewart Gray wrote:
> Hey Guys,
>
> Just a quick Q, I've been attempting to clean up my argus output and
> notice protocol 'man' shows up. ra -nn doesnt seem to resolve it to
> an ip/ethernet protcol suggesting it might be some sort of an argus
> index. The fact it shows no ip or MAC addresses also supports this
> theory.
>
> 15:08:56.192892 man 1
> 0 34 1 858 875160 CON
> 15:09:56.189029 man 5
> 0 53 1 1050 903212 CON
> 15:10:56.065146 man 1
> 0 36 1 826 915588 CON
> 15:11:56.025223 man 3
> 0 41 1 826 945644 CON
> 15:12:56.085374 man 1
> 0 34 1 442 948296 CON
> Anyway to disable it (or any idea's what it is?)
>
> Ta,
>
> Stewart
>
> #####################################################################################
> Important: This electronic message and attachments (if any) are
> confidential and may be legally privileged. If you are not the
> intended recipient do not copy, disclose or use the contents in any
> way. Please let us know by return e-mail immediately and then
> destroy this message.
> #####################################################################################
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20080213/10d0baff/attachment.html>
More information about the argus
mailing list