Which flag?

Carter Bullard carter at qosient.com
Tue Oct 1 18:41:36 EDT 2013


So the manpage is already ordered by precedence, if there are multiple
indications, the first one '*',  wins over 's' and 'd', which win over
gaps which wins over out of order. 

That trend should work for all the flags descriptions.

Carter 



On Oct 1, 2013, at 2:02 PM, elof2 at sentor.se wrote:

> Hi Carter!
> 
> The ra manual states the following (and more) flow-flags:
>               *     -  Both Src and Dst loss/retransmission
>               s     -  Src loss/retransmissions
>               d     -  Dst loss/retransmissions
>               g     -  Gaps in sequence numbers were observed
>               &     -  Both Src and Dst packet out of order
>               i     -  Src packets out of order
>               r     -  Dst packets out of order
> 
> If there are both gaps in the sequence numbers *and* src retransmissions in the same flow, will flag 'g' have priority over 's' or vice versa?
> 
> Perhaps the evaluation order should be noted in the manual...
> 
> /Elof
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20131001/afd1a8c2/attachment.bin>


More information about the argus mailing list