new argus and argus-clients on the server

Carter Bullard carter at qosient.com
Tue Jun 10 21:14:36 EDT 2014


excellent !!!!  still having some v9 issues but glad to see that v5 is better !!!
Carter


> On Jun 10, 2014, at 8:03 PM, "David Edelman" <dedelman at iname.com> wrote:
> 
> I've had netflow-v5 blasting away at several radium clients for most of the
> day and it looks good. I am running argus against my test of problem
> children and I'll provide feedback as soon as that exercise is complete.
> 
> --Dave
> 
> 
> -----Original Message-----
> From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu
> [mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On
> Behalf Of Carter Bullard
> Sent: Monday, June 09, 2014 8:57 PM
> To: Argus
> Subject: [ARGUS] new argus and argus-clients on the server
> 
> Gentle people,
> New argus and argus-clients on the list, to be had here:
> 
>   http://qosient.com/argus/dev/argus-latest.tar.gz
>   http://qosient.com/argus/dev/argus-client-latest.tar.gz
> 
> These versions have had their netflow support ringed out
> pretty good, and the sasl support is working in all sites
> that were complain ( I think Jesse's problems were cleared
> up ???? ).
> 
> Fixed quite a number of netflow v9 and a few v5 problems
> with time parsing.  However, there are a number of broken
> netflow v9 implementations with buggy template management.
> The achilles heel of netflow v9 and ipfix, if you don't
> get good template management, the the flows are worthless,
> cause you can't parse them.  Really bad design.
> 
> ratop has been gone over pretty well in this pass.  The
> IPv6 CIDR support is working and the use of "-m none" to
> read files without any record modification is working well.  
> This may end up as the default, so if you use ratop, 
> and would rather that it didn't modify the input flow
> stream, use the "-m none" option for a while to see
> if you like it.
> 
> ratop() doesn't eat cycles when your browsing files now,
> and we defer update the screen until the file is done.
> 
> So all is getting much better, and hopefully ready for
> release.  If you have any problems, please holler !!!!
> 
> Thanks for all the help !!
> Carter



More information about the argus mailing list