Argus-info Digest, Vol 63, Issue 14

[CS Lee]

hi rafael,

How about doing looping as a trick

for i in `ls -1tr dump*`; do argus -r $i -w all.dump; done

Since argus will write continuously to all.dump so it will contain all the
flows from your pcaps.

Cheers

On Sat, Nov 27, 2010 at 1:00 AM, <argus-info-request at lists.andrew.cmu.edu>wrote:

> Send Argus-info mailing list submissions to
>        argus-info at lists.andrew.cmu.edu
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://lists.andrew.cmu.edu/mailman/listinfo/argus-info
> or, via email, send a message with subject or body 'help' to
>        argus-info-request at lists.andrew.cmu.edu
>
> You can reach the person managing the list at
>        argus-info-owner at lists.andrew.cmu.edu
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Argus-info digest..."
>
>
> Today's Topics:
>
>   1.  Too many inputs (Rafael Barbosa)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 26 Nov 2010 14:34:58 +0100
> From: Rafael Barbosa <rrbarbosa at gmail.com>
> Subject: [ARGUS] Too many inputs
> To: Argus <argus-info at lists.andrew.cmu.edu>
> Message-ID:
>        <AANLkTikbdJZyeZgsEhmjDj+Dm9sBUoASfhefFdfaqx0P at mail.gmail.com<AANLkTikbdJZyeZgsEhmjDj%2BDm9sBUoASfhefFdfaqx0P at mail.gmail.com>
> >
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi all,
>
> When trying to read several hundreds of small pcap files (100MB) to create
> a
> argus flow file I ran into a problem. When I tried:
> $> argus -r dump* -w file.argus
>
> I got the following error:
> argus[34458]: 26 Nov 10 14:29:02.394286 ArgusOpenInputPacketFile: too many
> inputs max is 5
>
> Is it possible to overcome this limitation without merging the files
> manually?
>
> Thanks,
> Rafael Barbosa
> http://www.vf.utwente.nl/~barbosarr/<http://www.vf.utwente.nl/%7Ebarbosarr/>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> https://lists.andrew.cmu.edu/mailman/private/argus-info/attachments/20101126/bd0d7c37/attachment-0001.html
>
> ------------------------------
>
> _______________________________________________
> Argus-info mailing list
> Argus-info at lists.andrew.cmu.edu
> https://lists.andrew.cmu.edu/mailman/listinfo/argus-info
>
>
> End of Argus-info Digest, Vol 63, Issue 14
> ******************************************
>



-- 
Best Regards,

CS Lee<geek00L[at]gmail.com>

http://geek00l.blogspot.com
http://defcraft.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20101127/3bb4adac/attachment.html>