ra spktsz/dpktsz

[Carter Bullard]

The packet size distribution reporting is a future feature, and I'll put it in 3.0.[34].
Currently we report the max and min packet size seen.
I'll add it to argus-3.0.3 early in Jan.

Quite right on the Unix Time vs UTC, I'll make that change now.

Carter

On Dec 15, 2009, at 11:56 PM, CS Lee wrote:

>  hi carter,
> 
> i read in the ra man page and there's one flow field i would like to print out but it returns zeros which is histogram for src/dst packet size distribution, even if I use -Z to generate packet size data in argus command, however when I try to print it with ra -nr argus.out -s spktsz dpktsz, there's no intended result. Here's the description i pick from ra man page.
> 
>  spktsz      histogram for the src packet size distribution
>  dpktsz      histogram for the dst packet size distribution
> 
> On the other hand, in the man page, the description for -u is wrong, it's not printing utc but unix time stamp instead.
> 
> 
> Cheers.
> 
> 
> -- 
> Best Regards,
> 
> CS Lee<geek00L[at]gmail.com>
> 
> http://geek00l.blogspot.com
> http://defcraft.net

Carter Bullard
CEO/President
QoSient, LLC
150 E 57th Street Suite 12D
New York, New York  10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20091216/2c10d087/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20091216/2c10d087/attachment.bin>