argus and filtering

[Carter Bullard]

Hey Phillip,
The configuration variable is "RA_FILTER" not "ARGUS_FILTER".  I  
tested this
and it should work, but if this doesn't, send mail!!!!

Carter


On Oct 2, 2009, at 4:39 PM, Phillip Deneault wrote:

> I'm attempting to filter using the 3.0.2 code of the argus daemon
> available here:
> ftp://www.qosient.com/dev/argus-3.0/argus-3.0.2.tar.gz
>
> And I've been trying to set the ARGUS_FILTER using the following two
> lines of a config file.
>
> ARGUS_FILTER="not net 192.168.1.0/24"
> ARGUS_ACCESS_PORT=561
>
> I then use this command line to run the ra tool.
>
> argus -X -F /etc/argus.conf.test
>
> But I'm still getting data to and from 192.168.1.0/24.  Can anyone  
> else
> confirm this is a bug they have?  I'm running Centos 5.3.
>
> Thanks,
> Phil
>

Carter Bullard
CEO/President
QoSient, LLC
150 E 57th Street Suite 12D
New York, New York  10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20091002/cb7c5bf2/attachment.bin>