Argus flow aggregation options

[Fariba Haddadi via Argus-info]

Hi All,

I was wondering if Argus has an option to aggregate the flows within a time window (time interval). I mean, for example in every 10 sec, instead of having multiple flows with the same "SrcIP, SrcPort, DstIP, DstPort, proto" combination, only one aggregated flow is exported. If there is such an option, can you tell me how I can use it in uni-direction and bi-directional  mode?


Thanks,
-Fariba
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160108/228271e0/attachment.html>