Statistics of active and idle packets
Daniel Hunter via Argus-info
argus-info at lists.andrew.cmu.edu
Wed Mar 23 11:04:07 EDT 2016
Hello! I want to know more details about some of the argus/ra fields. In
particular, I am interested in sintpktact and sintpktidl (along with the
similar fields for the destination and jitters). What distinguishes a
packet as active or idle? I have found that the active source jitter
(sjitact) is rarely filled (http/https and ssh traffic).
I am also curious about the distribution fields such as sintdist and
dintdist. Is there a good example of how to use these fields?
I am using Argus v220.127.116.11. Thanks much!
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the argus