Subject: Only outgoing traffic
a.buurman@wxs.nl
Date: Mon Jan 05 2004 - 02:12:27 CST
L.S.
I'm having slight problems setting up flowscan with argus. The system works, BUT...
I'm only having out-going trafffic.
this is part of an RA output: (showing both ways traffic)
04-01-04 21:29:50.050316 0.000495 tcp 194.249.26.190.1760 -> {my-ip}.6890 1 1 62 54 RST
04-01-04 21:29:51.579941 0.000310 tcp 194.249.26.190.1760 -> {my-ip}.6890 1 1 62 54 RST
04-01-04 21:28:52.482155 45.222812 tcp 212.238.234.52.1147 -> {my-ip}.6883 2 2 117 108 EST
04-01-04 21:28:53.206513 58.170174 udp {my-ip}.1229 -> 213.73.246.64.1077 18 0 1564 0 INT
04-01-04 21:28:54.225393 59.864565 s tcp {my-ip}.1255 -> 217.82.26.73.6883 135 107 181340 6107 EST
this is my CampusIO.cf:
NextHops 10.0.0.138
OutputIfIndexes 2
LocalSubnetFiles local_nets.boulder
OutputDir graphs
Verbose 1
Protocols icmp, tcp, udp
TCPServices ftp-data, ftp, smtp, http, 1863, cvsup, https, imap, domain, ssh
UDPServices domain, snmp, snmp-trap
and my local-nets.boulder:
SUBNET=192.168.0.0/24
DESCRIPTION=our network
SUBNET={my-ip}/32
DESCRIPTION=our host
Any help would be appreciated, regards
Arnoud Buurman
--
Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe flowscan" in message body
Archive http://net.doit.wisc.edu/~plonka/list/flowscan/archive/
This archive was generated by hypermail 2b25 : Mon Jan 05 2004 - 02:21:52 CST