[Bug] filter problem

Nick Diel nick at engineerity.com
Fri Jun 6 12:55:14 EDT 2008


The following filter (and different variations) doesn't filter correctly:
dst port 25 and reset

Though splitting the filter up into two passes has the correct outcome.

ra -r argusFile - dst port 25 and reset | wc -l
6

ra -r argusFile -w - - dst port 25 | ra -r - - reset | wc -l
177

Nick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20080606/0bcc50e9/attachment.html>


More information about the argus mailing list