TotBytes field Truncated
Barry Kolts
bhkolts at gotrain.org
Mon Sep 21 22:51:45 EDT 2009
Hi All,
When using the command:
racluster -M rmon -m saddr -r /path/to/argus.data -t
2009/09/20.00:00-2009/09/20.23:59 -w - ip \
| rasort -m bytes -w - | ra -s saddr sbytes dbytes bytes - net xx.xx.xxx.xxx
I get the output:
SrcAddr SrcBytes DstBytes TotBytes
xx.xx.xxx.xxx 11779408141 2621465262 1440087340
Notice that TotBytes field has been truncated on the right, it should end in
a 3. This only seems to happen when the TotBytes field is more than 10
digits, under 10 digits it works fine.
Is this a bug or have I miss configured something somewhere?
Let me know what other information is needed to answer this question.
Thanks in advance,
Barry
More information about the argus
mailing list