forked from pool/argus
e934a4ca20
- Update to 3.0.8 version: + Changes from 3.0.6.1: Update and Fixes for remote argus data filter support Changes for netflow packet parsing to fix netflow in clients. Fixes for wild metric counts in new flow data. Update filter logic to be consistent with client filters. Modifications for timeout issues when in non-select polling. Fix for source id type assignement from commandline Change for compiler timeout values Fixes for ARP direction processing Back out of duplicate packet tracking logic Mods for duplicate packet reporting Modify configure.ac for pcap_dump_flush for older libpcaps Modify timeouts within "nonselectable" packet processing loop. Use VID for the VLAN identifer for the key. Fix syslog while daemonized Remove nanosleep() to improve performance. Major addtions for SDN tracking. New Flow model specifications in argus.conf. Fixes for solaris port, to avoid scheduling problems with record timeouts + Added: argus-3.0.8.tar.gz README.SUSE + Dropped: argus-3.0.6.1.tar.bz2 README.SuSE + Fixes in Specfile Changed permissions to 0644 for argus.service to clear rpmlint warning Removed System/Magic from chmod command, to clear rpmlint warning Removed %attr stanza from %doc lines, unneeded, and they were set incorrectly in the first place, and causing rpmlint to fail, due to unreadable files OBS-URL: https://build.opensuse.org/request/show/250030 OBS-URL: https://build.opensuse.org/package/show/security/argus?expand=0&rev=15
33 lines
926 B
Plaintext
33 lines
926 B
Plaintext
README.SuSE
|
|
|
|
choeger, 4.5.98
|
|
|
|
Argus is a network-monitoring-tool.
|
|
Take a look at /usr/doc/packages/README* for details.
|
|
|
|
Please change the variables in /etc/sysconfig/argus if you need.
|
|
|
|
A daily restart-script may look like this:
|
|
|
|
----------------------------------[snip]---------------------------------
|
|
#!/bin/sh
|
|
|
|
rcargus stop
|
|
mv /var/log/argus.log /var/log/argus.`date +"%y%m%d"`.log
|
|
gzip -9 /var/log/argus.`date +"%y%m%d"`.log
|
|
rcargus start
|
|
----------------------------------[snip]---------------------------------
|
|
|
|
you may copy it to /root/bin/argus_restart and add the following to your
|
|
/etc/crontab:
|
|
|
|
----------------------------------[snip]---------------------------------
|
|
50 17 * * * root /root/bin/argus_restart
|
|
----------------------------------[snip]---------------------------------
|
|
|
|
if you want to restart argus at 17:50 (5:50pm).
|
|
|
|
Use the tools 'ra' and 'services' to take a look in your captured
|
|
argus-data.
|
|
|