Cluster Question
Carter Bullard
carter at qosient.com
Wed Jul 13 20:28:19 EDT 2011
Hey Lief,
The trick to port aggregation is that you have to include the protocol as well, without it, the ports don't have meaning.
This has come up before, and so I should look at enabling proto wildcarding. Will take some thought thought. Until then, add 'proto' to your aggregation model:
racluster -m saddr daddr proto dport
Carter
On Jul 13, 2011, at 7:50 PM, Leif Tishendorf <ltishend at gmail.com> wrote:
> Hey All,
>
> I was wondering if there is a way to get a clustering of src to unique dst and port. So far my attempts at clustering will do a src and unique dst but port information seems be removed.
>
> Thanks,
>
> --Leif
>
More information about the argus
mailing list