# Install argus-clients with Homebrew, dnf, MacPorts, Nix, apt Audit Record Generation and Utilization System clients. Version 5.0.0 via Homebrew; verified 2026-06-25. Also installable with debian: sudo apt install argus-client. ## Install ```sh sudo av install brew:argus-clients ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install argus-clients ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install argus-clients ``` Evidence: MacPorts ports tree: net/argus-clients/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - dnf (92%): ```sh sudo dnf install argus-clients ``` Evidence: Fedora Rawhide package metadata: argus-clients from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#argus-clients ``` Evidence: nixpkgs package indexes: pkgs/by-name/ar/argus-clients/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Debian apt (92%): ```sh sudo apt install argus-client ``` Evidence: Debian stable package indexes: argus-client from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz ## Package facts - **Package key:** brew:argus-clients - **Package manager:** Homebrew - **Version:** 5.0.0 - **Source summary:** Audit Record Generation and Utilization System clients - **Homepage:** - **Repository:** - **Last updated:** 2026-06-25T13:37:36+02:00 - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - argusclientbug (alias) - ra (alias) - rabins (alias) - racluster (alias) - racount (alias) - radium (alias) - ramanage (alias) - ranonymize (alias) - rasort (alias) - rastream (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 5.0.0 ## Project history and usage Argus Clients is the analysis half of the OpenArgus network audit system: a collection of command-line programs that read, filter, aggregate, anonymize, sort, stream, and report on Argus flow records. ### Project history OpenArgus describes Argus as the first network flow system, developed by Carter Bullard in the early 1980s at Georgia Tech and adapted for cyber-security incident response at the first CERT at Carnegie Mellon's Software Engineering Institute in the late 1980s. The modern project is split into two packages: `argus`, the packet-processing sensor that generates flow data, and `argus-clients`, the programs that process that data. The OpenArgus site says development moved to GitHub, with official repositories for both the sensor and client programs. ### Adoption history OpenArgus says Argus has been used operationally by US Government, US DoD, DHS, DOE, large corporations, and university networks worldwide, and that it is used in research for performance analysis, situational awareness, cyber security, machine learning, and SDN-related work. The client package is central to that adoption because Argus records become useful through CLI pipelines: `ra`-style readers, aggregators, anonymizers, sorters, stream processors, and reporting tools can be composed into real-time or retrospective workflows. ### How it is used The Homebrew package exposes many client commands, including `ra`, `rabins`, `racluster`, `racount`, `radium`, `ranonymize`, `rasort`, and `rastream`. OpenArgus describes the clients as tools for data distribution, collection, filtering, aggregation, binning, minimization, and analytics. The `rarc` file is the client configuration surface. The existing curation cites official manpage documentation for `~/rarc` and `$ARGUSHOME/rarc`, and because client configuration can include access and transport settings, the same file is treated as the credentials location when credentials are configured. ### Why package nerds care Argus Clients is the sort of Unix package that rewards people who like composable command-line data plumbing. It is not a single dashboard; it is a suite of small programs for turning binary flow records into filtered, sorted, joined, aggregated, anonymized, and streamed outputs. It also carries a long-lived network-operations lineage into modern package managers: an early flow-auditing ecosystem with its own record format, config files, and tool vocabulary, still installable as a contemporary Homebrew formula. ### Timeline - Early 1980s: Carter Bullard develops Argus at Georgia Tech. - Late 1980s: Argus is adapted for incident response at CERT/SEI. - 2020s: OpenArgus moves argus and argus-clients development to GitHub. - Current: Argus 5.x client programs are released in sync with the sensor to read new flow-record features. ### Related projects - The `argus` sensor package generates the flow records consumed by argus-clients. - OpenArgus compares Argus data with NetFlow, Jflow, Qflow, Kflow, IPFIX, and historical flow-tools. ### Sources - - - - ## Security Notes broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/rarc, $ARGUSHOME/rarc ## Credential files - Unix: ~/rarc, $ARGUSHOME/rarc ## Other Package-Manager Records - Debian apt - argus-client - 1:5.0.2+git20250321.41f65e2-2: normalized package name match | Debian stable package indexes: argus-client from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | IP network transaction auditing tool | http://qosient.com/argus - Nix - argus-clients: normalized package name match | nixpkgs package indexes: pkgs/by-name/ar/argus-clients/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - argus-client - 1:3.0.8.2-6.2ubuntu4: normalized package name match | Ubuntu 24.04 LTS package indexes: argus-client from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | IP network transaction auditing tool | http://qosient.com/argus - dnf - argus-clients - 3.0.8.2-31.fc45: normalized package name match | Fedora Rawhide package metadata: argus-clients from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Client tools for argus network audit | http://qosient.com/argus - MacPorts - argus-clients: normalized package name match | MacPorts ports tree: net/argus-clients/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/argus-clients.yml](https://github.com/mxcl/pkgdb/blob/main/combined/argus-clients.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph