Re: Question about ra or radump
Carter Bullard via Argus-info <[email protected]> Tue, 30 Aug 2016 00:16:39 -0400
| Newsgroups | gmane.network.argus |
|---|---|
| Message-ID | <[email protected]> |
ARGUS_CAPTURE_DATA_LEN=128 > On Aug 30, 2016, at 12:10 AM, Andrey Silversburg <[email protected]> wrote: > > This is the command: > /opt/argus-client/bin/radump -s stime pkts suser:64 duser:64 -r /var/log/argus/argus.out - port http > > StartTime TotPkts srcUdata dstUdata > > > Maybe there is some parameter from argus.conf i missed. > > > On 8/30/2016 10:45 AM, Carter Bullard wrote: >> Hey Andry, >> How are you trying to print the fields ??? And what does the output look like ??? >> Carter >> >>> On Aug 29, 2016, at 10:47 PM, Andrey Silversburg via Argus-info <[email protected]> wrote: >>> >>> Hi all, my name is Andrey >>> >>> I try to extract some srcUdata and dstUdata from the argus file using radump. I follow from this documentation http://qosient.com/argus/man/man1/radump.1.pdf. But it seems the data is empty but the file is very big around 600MB. Is there any way or configuration from the radump or from argus.conf I missed ?. >>> >>> Thank you >>> >>> --- >>> This email has been checked for viruses by Avast antivirus software. >>> https://www.avast.com/antivirus >>> >>> > > > --- > This email has been checked for viruses by Avast antivirus software. > https://www.avast.com/antivirus > >
smime.p7s
(application/pkcs7-signature, 6.1 KB) - not displayed