Questions about payload buffers in argus

Digital Ninja dn1nj4 at gmail.com
Thu Apr 7 12:12:55 EDT 2011


Hello again list,  I've not seen any responses on this request from
last week.  Is anyone using argus with payload buffers?

On Thu, Mar 31, 2011 at 1:00 PM, Digital Ninja <dn1nj4 at gmail.com> wrote:
> Hi list,
>
> When leveraging the argus -U option to capture user buffers, what is
> the maximum amount of data that can be captured?  Is there a way to
> store all payload information?
>
> Second, when reading the user buffers back in, with ra -s +suser:XXXX,
> has anyone experienced a segfault?  If I set XXXX to 4334 I get all of
> the expected user buffers.  If however, I up that number to 4335 or
> higher, I get a seg fault.  Ideally I'd like to see the entire buffer,
> regardless of length.
>
> Finally, are the user buffers printed out in binary format or are they
> converted to straight ASCII (where all non-printable ASCII characters
> are simply ".")?  If the latter, how can one get the actual hex values
> from the buffers?
>
> I am currently testing with v3.0.4.
>
> Thanks in advance.
>



More information about the argus mailing list