TotBytes field Truncated

Barry Kolts bhkolts at gotrain.org
Mon Sep 21 22:51:45 EDT 2009


Hi All,

When using the command:
racluster -M rmon -m saddr -r /path/to/argus.data -t 
2009/09/20.00:00-2009/09/20.23:59 -w - ip \
| rasort -m bytes -w - | ra -s saddr sbytes dbytes bytes - net xx.xx.xxx.xxx

I get the output:
SrcAddr     SrcBytes     DstBytes   TotBytes
     xx.xx.xxx.xxx  11779408141   2621465262 1440087340

Notice that TotBytes field has been truncated on the right, it should end in 
a 3. This only seems to happen when the TotBytes field is more than 10 
digits, under 10 digits it works fine.

Is this a bug or have I miss configured something somewhere?

Let me know what other information is needed to answer this question.

Thanks in advance,
Barry 






More information about the argus mailing list