Proto 0 not displaying in ra
Jesse Bowling
jessebowling at gmail.com
Thu Jun 20 14:53:16 EDT 2013
Hi,
So I started with an racount:
# racount -M proto -M addr -r 6-18-13.argus
<snip>
racount records total_pkts src_pkts dst_pkts
total_bytes src_bytes dst_bytes
0 1148 6377 6377 0
2710225 2710225 0
</snip>
I found that interesting so I wanted to look at the original records:
# ra -r 6-18-13.argus - proto 0
#
I'm using 3.0.7.9, and this appears to be a bug...Let me know if I can help
debug...
Cheers,
Jesse
--
Jesse Bowling
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130620/b38eefbc/attachment.html>
More information about the argus
mailing list