Argus-info Digest, Vol 42, Issue 18

[CS Lee]

hi oguz,

What do  you mean, do you mean retrieve the packets from pcap based on
certain flows in the argus dump?

On Fri, Feb 20, 2009 at 1:00 AM, <argus-info-request at lists.andrew.cmu.edu>wrote:

> Send Argus-info mailing list submissions to
>        argus-info at lists.andrew.cmu.edu
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://lists.andrew.cmu.edu/mailman/listinfo/argus-info
> or, via email, send a message with subject or body 'help' to
>        argus-info-request at lists.andrew.cmu.edu
>
> You can reach the person managing the list at
>        argus-info-owner at lists.andrew.cmu.edu
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Argus-info digest..."
>
>
> Today's Topics:
>
>   1.  get the packets inside a flow data (Oguz Yarimtepe)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 19 Feb 2009 18:14:17 +0200
> From: Oguz Yarimtepe <comp.ogz at gmail.com>
> Subject: [ARGUS] get the packets inside a flow data
> To: argus-info at lists.andrew.cmu.edu
> Message-ID: <1235060057.9204.7.camel at gezenti>
> Content-Type: text/plain
>
>
> Hi,
>
> I am working on an offline tcpdump data and using argus to get flow
> data. If  want to investigate the packets inside a flow record lets say
> the Nth record at the flow output, how can i get them?
>
> Thanx.
>
> --
> Oguz Yarimtepe
> http://www.loopbacking.info
>
>
>
> ------------------------------
>
> _______________________________________________
> Argus-info mailing list
> Argus-info at lists.andrew.cmu.edu
> https://lists.andrew.cmu.edu/mailman/listinfo/argus-info
>
>
> End of Argus-info Digest, Vol 42, Issue 18
> ******************************************
>



-- 
Best Regards,

CS Lee<geek00L[at]gmail.com>

http://geek00l.blogspot.com
http://defcraft.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090220/25b2c7a6/attachment.html>