argus 3.0.3.x choking on vlan tags?

carter at qosient.com carter at qosient.com
Thu Oct 7 16:18:53 EDT 2010


Hey John,
Grab some packets with tcpdump and I'll figure out what is wrong.

Carter
Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: John Gerth <gerth at graphics.stanford.edu>
Sender: argus-info-bounces+carter=qosient.com at lists.andrew.cmu.edu
Date: Thu, 07 Oct 2010 13:00:07 
To: Argus<argus-info at lists.andrew.cmu.edu>
Subject: [ARGUS] argus 3.0.3.x choking on vlan tags?

Our infrastructure is moving from Cisco to HP and today I've
been trying to get argus to work with HP mirror ports.

I can now see packets with tcpdump, but they all have 802.1q
vlan tags on them and my argus 3.0.3x binary now doesn't think
it's seeing anything -- which surprised me.

Does anyone now how to  either:
  a) convince argus to see the packets
  b) tell an HP Procurve 5400 not to tag the monitored packets

-- 
John Gerth      gerth at cs.stanford.edu  Gates 378   (650) 725-3273  fax 723-0033





More information about the argus mailing list