No subject

[Carter Bullard]

Hey David,
   The only issue is the Unix MAXSTRLEN issue.
Thats really why we supported the, "if its
going to be big, put the whole thing in a file",
sort of approach.  MAXSTRLEN is normally 256.

   argus is passing the buffer to libpcap
routines to parse out the filter expression, in the
client programs, ra, raservices, etc..... I rewrote
the libpcap compiler.  These routines will be the
primary sources of heartache, if the string gets 
too long and there is a problem.

    I'm not sure that there will be a problem,
but if there will be it will be in the libpcap
filter parsing code.

Hope this helps,

Carter

-----Original Message-----
From: David Brumley [mailto:dbrumley at goju.Stanford.EDU]
Sent: Saturday, February 20, 1999 1:07 AM
To: Carter Bullard
Subject: 



In argus_util.c is there any reason on line 3394ish that "off" can't be
longer than 256 bytes?  This relates to the cmdline maximum.  If I raise
the cmdline argument, no more core dumps.  however, i still get an error
in here (-F or really long command line).

I don't see anything like it in argus-1.5....

Thanks for the help!
-david