[ARGUS] Appbytes

John Gerth gerth at cs.stanford.edu
Thu May 27 18:40:31 EDT 2021


To get the argus sensor to tally appbytes in flows, you need to uncomment the directive in /etc/argus.conf

> # Argus can be configured to generate metrics that include
> # the application byte counts as well as the packet count
> # and byte counters.
> #
> # Commandline equivalent   -A
> #
> 
> #ARGUS_GENERATE_APPBYTE_METRIC=yes
> 

/J

On 5/27/21 3:29 PM, Russell Fulton wrote:
> I just tried to display appbytes for some flows but they are all zero?  I could not find anything in the argus man page about needing additional configuration?
> 
> I know I have used this in the past…
> 
> sensors at secmonprd10:~$ argus -v
> Argus Version 3.0.8.2
> 


More information about the argus mailing list