Argus on FreeBSD

Monah Baki <[email protected]> Mon, 3 Jul 2017 11:42:07 -0400
Newsgroups gmane.network.argus
Message-ID <CALP3=x-NPE4Xmw_VXUL7wfR4_G9bpxcUy5apM9Y3JXVhyUk=7w@mail.gmail.com>
Hi all,


Compiled yesterday argus 3.0.8.2 on FreeBSD 10.3-RELEASE-p18. I noticed
that running:

netstat -an
tcp4       0      0 *.562
tcp6       0      0 *.561

root@devsrvr:/usr/local/argus/bin # ./ra -S localhost:562
         StartTime      Flgs  Proto            SrcAddr  Sport
Dir            DstAddr  Dport  TotPkts   TotBytes State
   11:37:45.823494  e s         tcp       50.206.63.92.2708     <?>
192.168.1.253.ssh          87       8058   CON
   11:37:47.185509  e           tcp        192.168.1.7.50653    <?>
192.168.1.253.ssh          16       1632   CON

root@devsrvr:/usr/local/argus/bin # ./ra -S localhost:561
ra[52458]: 11:37:56.460087 connect to 192.168.1.253:561 failed 'Connection
refused'


running ./ratop -S localhost:562 displays results (without sco and dco)
while ./ratop -S localhost:561 does not display a thing.

Is it possible that tcp6 might be the issue, not sure why it's running on
tcp6 when in my rc.cong I have the following:

ipv6_network_interfaces="none"    # Default is auto
ipv6_activate_all_interfaces="NO" # this is the default


Thanks
Monah