Statistics of active and idle packets

Daniel Hunter via Argus-info <[email protected]>
Newsgroups gmane.network.argus
Message-ID <CAEgkeUyAVNS_q9XSb-6MkROAO0ztTee1thForNGUxi0A+nj9rg@mail.gmail.com>
Hello! I want to know more details about some of the argus/ra fields. In
particular, I am interested in sintpktact and sintpktidl (along with the
similar fields for the destination and jitters). What distinguishes a
packet as active or idle? I have found that the active source jitter
(sjitact) is rarely filled (http/https and ssh traffic).
I am also curious about the distribution fields such as sintdist and
dintdist. Is there a good example of how to use these fields?
I am using Argus v3.0.8.1. Thanks much!
-- Daniel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.