Specifications
Argus 3.0.4 and its clients are now available. Changes for 3.0.4 include enhanced multi-threaded support, new interface specification in the /etc/argus.conf, richer wireless monitoring support, argus events, UDP transport and native multicast transport of flow records, and new metrics, including keystroke identification in TCP traffic. And of course a very large number of bugs have been fixed, as reported to the developers mailing list.
Book Description
Argus is now developed on Mac OS X, and tested extensively on Linux, FreeBSD, OpenBSD, NetBSD and Solaris.7. It has been ported to Cygwin, Windows NT, IRIX, AIX, UNICOS, and OpenWRT and should port easily to any Unix operating system.
Because Argus uses libpcap as its packet capture interface, Argus, in its current form, can only be ported to systems that support libpcap.
If you do port Argus to another platform, please send your diffs to the mailing list, and we'll incorporate them into the release.