feature request - data unit

Carter Bullard carter at qosient.com
Mon Apr 28 10:12:10 EDT 2014


We’ve got the -H option which does exponential type of display.

thoth:~ carter$ ra -S localhost -H -s stime dur saddr daddr sbytes dbytes
                 StartTime        Dur            SrcAddr            DstAddr     SrcBytes     DstBytes 
2014/04/28.10:10:09.916479   0.093119       192.168.0.68       160.36.208.8       1.922K      21.499K
2014/04/28.10:10:10.976835   4.546218       192.168.0.68       192.168.0.66     330.000        2.530K
2014/04/28.10:10:10.875590   0.000000  01:80:c2:00:00:0e  74:44:01:8f:82:fe      60.000        0.000

Is this getting close ??

We have for many fields now a format indication, such as

   “ -s saddr:14:%d “

This prints an address as an int, rather than a string.
This is a feature that is new to the 3.0.8 client release,
but even with this I don’t see how to configure your type of support.

If not like the -H option, what are you thinking about ???

Carter

On Apr 28, 2014, at 8:46 AM, CS Lee <geek00l at gmail.com> wrote:

> hi Carter,
> 
> Is that possible to add the feature where we can define either the argus flow data displayed in bit/byte/kilobit/kilobyte/megabyte/gigabyte, 
> 
> It would be much easier to read than just numbers. I'm not sure if others may find this useful or welcoming.
> 
> 
> -- 
> Best Regards,
> 
> CS Lee<geek00L[at]gmail.com>
> 
> http://geek00l.blogspot.com
> http://defcraft.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140428/e62c5807/attachment.sig>


More information about the argus mailing list