[ARGUS] Mac OS pkg for Intel and Apple Silicon

[Carter Bullard]

Gentle persons,
I have an official argus-5.0 pkg for Apple Intel and M[1,2,3] Silicon that I would like to test out …
I’ve been running it for a while on MacBooks, iMacs and Mac Pros, but its been a small number of units (10) …

This pkg installs a self configuring, comprehensive endpoint argus-5.0 sensor, that monitors every interface (physical/virtual) …
and a copy of rastream.1 (rasplit) that will write the flow data into an standard 5m argus archive in /usr/local/argus/archive … 
The archive will be /usr/local/argus/archive/$srcid(uuid)/$inf/%y/%m/%d/argus-%y.%m.%d.%h.%m.%s.
There is no external access to the argus stream, but it installs a standard /etc/argus.conf that you can modify.

Once the argus-5.0 clients are available, this should be a good utility daemon that you would want to run on any Mac … 

If anyone is interested in being a guinea pig, I can get a copy to you for testing.

Hope all is most excellent,

Carter
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1385 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20240120/94086170/attachment.bin>