Proto 0 not displaying in ra

Jesse Bowling jessebowling at gmail.com
Thu Jun 20 14:53:16 EDT 2013


Hi,

So I started with an racount:

# racount -M proto -M addr -r 6-18-13.argus
<snip>
racount   records     total_pkts     src_pkts       dst_pkts
total_bytes        src_bytes          dst_bytes
      0   1148        6377           6377           0
2710225            2710225            0
</snip>

I found that interesting so I wanted to look at the original records:

# ra -r 6-18-13.argus - proto 0
#

I'm using 3.0.7.9, and this appears to be a bug...Let me know if I can help
debug...

Cheers,

Jesse
-- 
Jesse Bowling
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130620/b38eefbc/attachment.html>


More information about the argus mailing list