# 使用 Homebrew, apt, dnf, MacPorts, Nix, zypper 安装 argus 查看 argus 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:argus ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install argus ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install argus ``` 证据: MacPorts ports tree: net/argus/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install argus-server ``` 证据: Debian stable package indexes: argus-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install argus ``` 证据: Fedora Rawhide package metadata: argus from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#argus ``` 证据: nixpkgs package indexes: pkgs/by-name/ar/argus/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install argus ``` 证据: openSUSE Tumbleweed package metadata: argus from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## 软件包事实 - **软件包键:** brew:argus - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 5.0.2 - **来源摘要:** Audit Record Generation and Utilization System server - **主页:** - **仓库:** - **上游文档:** - **许可证:** GPL-3.0-or-later - **源码归档:** - **最后更新:** 2026-06-25T13:37:36+02:00 - **已生成:** 2026-07-08T07:18:31+00:00 ## 可执行文件 - argus (cli) - argus-airport (cli) - argus-extip (cli) - argus-ipaddr (cli) - argus-ipmitool (cli) - argus-lsof (cli) - argus-netstat (cli) - argus-snmp (cli) - argus-stumbler (cli) - argus-vmstat (cli) - argusbug (cli) - argus (别名) - argus-airport (别名) - argus-extip (别名) - argus-ipaddr (别名) - argus-ipmitool (别名) - argus-lsof (别名) - argus-netstat (别名) - argus-snmp (别名) - argus-stumbler (别名) - argus-vmstat (别名) - argusbug (别名) ## macOS 提供的库 - cyrus-sasl - libpcap ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-07-08 - 管理器版本: 5.0.2 - 管理器更新时间: 2026-06-25 - 本地数据: OK - 上游仓库: https://github.com/openargus/argus - 检测到的最新版本: v5.0.2 (当前) ## 项目历史与用法 Argus is the sensor and daemon side of OpenArgus, an open-source network activity auditing system that turns packet traffic into rich flow records for operations, security, performance, research, and retrospective analysis. ### 项目历史 OpenArgus describes Argus as the first network flow system, developed by Carter Bullard in the early 1980s at Georgia Tech. It was later adapted for cyber-security incident response at the first CERT at Carnegie Mellon's Software Engineering Institute in the late 1980s. The project models network activity auditing after telephone call detail records: the goal is to account for network activity in a way that supports many management functions, including security. The site emphasizes that Argus is not limited to IP-only traffic and that it aims to produce rich network flow data from packets on the wire or in captures. OpenArgus now presents the system as two coordinated packages: `argus`, the packet-processing network flow sensor, and `argus-clients`, the programs that process the generated records. Recent OpenArgus release notes describe Argus 5.x as a major sensor and client release with many commits, contributions, and new flow-record features. ### 采用历史 According to OpenArgus, the software has been used operationally by US Government, US DoD, DHS, DOE, large corporations, and university networks worldwide. The site also describes research use in network performance analysis, situational awareness, cyber security, machine learning, and SDN chip-design work. Its adoption is helped by a classic source-plus-packages distribution model: OpenArgus notes source builds on Mac OS X, Linux, Unix, and Cygwin-enabled Windows, while the input records packages for Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, and openSUSE. ### 使用方式 The `argus` daemon reads live interfaces or packet captures and writes Argus flow records. Operators then pipe or store those records for processing by the client suite. The official site frames this as real-time network awareness, distributed visibility, active cyber defense, and retrospective analysis. The server configuration is `argus.conf`; the existing curation cites the official manpage for `/etc/argus.conf`, `$ARGUSPATH/argus.conf`, and `$ARGUSHOME/argus.conf`. Credentials are not a primary documented concept for the daemon package, so the credentials location is null. ### 为什么软件包爱好者会关心 Argus is significant because it predates many flow-monitoring conventions but still packages cleanly as a modern daemon plus CLI ecosystem. It gives Unix users a source-built, scriptable alternative to appliance-style network telemetry. For Homebrew users, it is also a reminder that some formulae are not just developer tools: installing `argus` can put a packet-capture daemon and network audit pipeline on a workstation or lab host, with the client formula providing the matching analysis commands. ### 时间线 - Early 1980s: Carter Bullard develops Argus at Georgia Tech. - Late 1980s: Argus is adapted for incident response at CERT/SEI. - 2020s: Development moves to official openargus GitHub repositories. - 2020s: Argus 5.x becomes the main branch for the sensor and client programs. ### Related projects - argus-clients processes records produced by the Argus sensor. - OpenArgus relates its data model to NetFlow, Jflow, Qflow, Kflow, IPFIX, and flow-tools. ### 来源 - - - - ## 安全说明 broad file, network, media, or database tool signal. - **Geiger 风险:** blue / 中 - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/argus.conf, $ARGUSPATH/argus.conf, $ARGUSHOME/argus.conf ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** argus - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 其他软件包管理器记录 - Debian apt - argus-server - 2:5.0.2-3: normalized package name match | Debian stable package indexes: argus-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | IP network transaction auditing tool | https://openargus.org - Nix - argus: normalized package name match | nixpkgs package indexes: pkgs/by-name/ar/argus/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - argus-server - 2:3.0.8.2-2.3build1: normalized package name match | Ubuntu 24.04 LTS package indexes: argus-server from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | IP network transaction auditing tool | https://openargus.org - dnf - argus - 3.0.8.2-30.fc44: normalized package name match | Fedora Rawhide package metadata: argus from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Network transaction audit tool | http://qosient.com/argus - dnf - argus-clients - 3.0.8.2-30.fc44: normalized package name match | Fedora Rawhide package metadata: argus-clients from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Client tools for argus network audit | http://qosient.com/argus - dnf - argus-devel - 3.0.8.2-30.fc44: normalized package name match | Fedora Rawhide package metadata: argus-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Header files for argus network audit | http://qosient.com/argus - zypper - argus - 3.0.8.3-4.6: normalized package name match | openSUSE Tumbleweed package metadata: argus from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Network Monitoring Tool | https://openargus.org/ - zypper - argus-server - 3.0.8.3-4.6: normalized package name match | openSUSE Tumbleweed package metadata: argus-server from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Daemon for Network Monitoring Tool | https://openargus.org/ - MacPorts - argus: normalized package name match | MacPorts ports tree: net/argus/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## 相关链接 - [Secret-risk packages](https://www.automicvault.com/zh-hans/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/zh-hans/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/zh-hans/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/zh-hans/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [argus-clients](https://www.automicvault.com/zh-hans/pkg/brew/argus-clients/) - Shares the same upstream homepage. - [ahcpd](https://www.automicvault.com/zh-hans/pkg/brew/ahcpd/) - Shares av.db curated category or tags: cli, daemon, networking. - [bmon](https://www.automicvault.com/zh-hans/pkg/brew/bmon/) - Shares av.db curated category or tags: cli, network-monitoring, networking. - [bozohttpd](https://www.automicvault.com/zh-hans/pkg/brew/bozohttpd/) - Shares av.db curated category or tags: cli, daemon, networking. - [btpd](https://www.automicvault.com/zh-hans/pkg/brew/btpd/) - Shares av.db curated category or tags: cli, daemon, networking. - [bwm-ng](https://www.automicvault.com/zh-hans/pkg/brew/bwm-ng/) - Shares av.db curated category or tags: cli, network-monitoring, networking. - [cdpr](https://www.automicvault.com/zh-hans/pkg/brew/cdpr/) - Shares av.db curated category or tags: cli, network-monitoring, networking. - [ctrld](https://www.automicvault.com/zh-hans/pkg/brew/ctrld/) - Shares av.db curated category or tags: cli, daemon, networking. - [ifstat](https://www.automicvault.com/zh-hans/pkg/brew/ifstat/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, monitoring, network, network-monitoring, networking. - [mrtg](https://www.automicvault.com/zh-hans/pkg/brew/mrtg/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, monitoring, network, network-monitoring, networking. ## Combined YAML source View the package source record on GitHub. [combined/argus.yml](https://github.com/automic-vault/db/blob/main/combined/argus.yml) ## 来源 - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph