new argus and argus-clients on the server
Carter Bullard
carter at qosient.com
Tue Jun 10 21:14:36 EDT 2014
excellent !!!! still having some v9 issues but glad to see that v5 is better !!!
Carter
> On Jun 10, 2014, at 8:03 PM, "David Edelman" <dedelman at iname.com> wrote:
>
> I've had netflow-v5 blasting away at several radium clients for most of the
> day and it looks good. I am running argus against my test of problem
> children and I'll provide feedback as soon as that exercise is complete.
>
> --Dave
>
>
> -----Original Message-----
> From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu
> [mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On
> Behalf Of Carter Bullard
> Sent: Monday, June 09, 2014 8:57 PM
> To: Argus
> Subject: [ARGUS] new argus and argus-clients on the server
>
> Gentle people,
> New argus and argus-clients on the list, to be had here:
>
> http://qosient.com/argus/dev/argus-latest.tar.gz
> http://qosient.com/argus/dev/argus-client-latest.tar.gz
>
> These versions have had their netflow support ringed out
> pretty good, and the sasl support is working in all sites
> that were complain ( I think Jesse's problems were cleared
> up ???? ).
>
> Fixed quite a number of netflow v9 and a few v5 problems
> with time parsing. However, there are a number of broken
> netflow v9 implementations with buggy template management.
> The achilles heel of netflow v9 and ipfix, if you don't
> get good template management, the the flows are worthless,
> cause you can't parse them. Really bad design.
>
> ratop has been gone over pretty well in this pass. The
> IPv6 CIDR support is working and the use of "-m none" to
> read files without any record modification is working well.
> This may end up as the default, so if you use ratop,
> and would rather that it didn't modify the input flow
> stream, use the "-m none" option for a while to see
> if you like it.
>
> ratop() doesn't eat cycles when your browsing files now,
> and we defer update the screen until the file is done.
>
> So all is getting much better, and hopefully ready for
> release. If you have any problems, please holler !!!!
>
> Thanks for all the help !!
> Carter
More information about the argus
mailing list