Hosts file

Carter Bullard carter at qosient.com
Fri Apr 23 09:55:21 EDT 2010


Hey Sajeev,
Look at the example rarc file that is in the clients ./support/Config, for the description
of how to use RA_PRINT_NAMES.  If you are using this file as ~/.rarc, then "-nnn"
should get FQDNs printed.  How your host resolves names is configurable, but
most will read the /etc/hosts file first.

You typed "eth 1" and it should be "eth1".

Duration is in seconds, jitter reporting is in mSecs.

Carter

On Apr 23, 2010, at 1:31 AM, Sajeev Nair wrote:

> I started using the tool very recently, love the product so far. I am having trouble with the following:
>  
> 1. Need to be able to resolve the IPs to a local hosts file, not sure how to do it. Tried using without the "-n" and "-nnnn" options without luck
>  
> 2. I was initially using the first interface to collect traffic and now need to add the second interface, running argus with the -i eth1 option does not seems to work, the output is below. I also tried entering the interface in the argus.conf file, this also did not work.
>                            argus -mAZR -i eth1  -X -w argus.out
>                                ArgusWarning: argus[29069]: 22 Apr 10 06:48:46.680137 started
>                                ArgusWarning: argus[29069]: 22 Apr 10 06:48:46.680227 ArgusGetInterfaceStatus: interface eth0 is up
>  
> 3.The duration for a particular flow that we get is it in seconds?
>  
> Thanks
>  
> Sajeev
>  





More information about the argus mailing list