argus-2.0.0h fixes all problems ;o)

Fri Sep 22 18:59:44 EDT 2000

	Looks like a missing include of os.h in server/Argus_arp.c:
...
#include <netinet/if_ether.h>
#include <net/if_arp.h>
#include <os.h>

adding it there makes it compile and run.
but the ll change for man looks to be right (at least on FreeBSD):

Fri 09/22 15:52:59.262192  unkn  0:6:29:75:9a:35       ->   ff:ff:ff:ff:ff:ff     1        0         66           0           INT
Fri 09/22 15:53:25.165043   man  pkts    357  bytes    25640  drops     0                                                     STP
	I've repatriated two of my 3 test PCs and installed Solaris 2.7 on the
IPC so I want to set tcpreplay on one PC and feed the VPN capture file (as 
a first instance) at argus on FreeBSD and Solaris and our sniffer so I can
check that all the packets out are seen and accounted for.

> 
> Sorry,
>   The URL for the new release is
> ftp://qosient.com/dev/argus/argus-2.0/argus-2.0.0h.tar.gz
> 
> Best Regards,
> 
> Carter
> 
> Carter Bullard
> QoSient, LLC
> 300 E. 56th Street, Suite 17A
> New York, New York  10022
> 
> carter at qosient.com
> Phone +1 212 813-9426
> Fax   +1 212 813-9426
> 
>    
>    
> 
> -----Original Message-----
> From: Peter Van Epp [mailto:vanepp at sfu.ca]
> Sent: Friday, September 22, 2000 1:28 PM
> To: Carter Bullard
> Subject: Re: seg fault
> 
> 
> 	Looks to be an IPX packet (in any case a non IP broadcast of some kind).
> This tcpdump file will loop argus_bpf (and it segfaults when cntrl-ced).
> 
> Peter Van Epp / Operations and Technical Support 
> Simon Fraser University, Burnaby, B.C. Canada
> 
> 
> 
> ------=_NextPart_000_007C_01C024B1.00AB94F0
> Content-Type: text/html;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
> <HTML>
> <HEAD>
> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
> charset=3DWindows-1252">
> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
> 6.0.4417.0">
> <TITLE>RE: argus-2.0.0h fixes all problems ;o)</TITLE>
> </HEAD>
> <BODY>
> <!-- Converted from text/plain format -->
> <BR>
> <BR>
> 
> <P><FONT SIZE=3D2>Sorry,</FONT>
> 
> <BR><FONT SIZE=3D2>  The URL for the new release is</FONT>
> 
> <BR><FONT SIZE=3D2><A =
> HREF=3D"ftp://qosient.com/dev/argus/argus-2.0/argus-2.0.0h.tar.gz">ftp://=
> qosient.com/dev/argus/argus-2.0/argus-2.0.0h.tar.gz</A></FONT>
> </P>
> 
> <P><FONT SIZE=3D2>Best Regards,</FONT>
> </P>
> 
> <P><FONT SIZE=3D2>Carter</FONT>
> </P>
> 
> <P><FONT SIZE=3D2>Carter Bullard</FONT>
> 
> <BR><FONT SIZE=3D2>QoSient, LLC</FONT>
> 
> <BR><FONT SIZE=3D2>300 E. 56th Street, Suite 17A</FONT>
> 
> <BR><FONT SIZE=3D2>New York, New York  10022</FONT>
> </P>
> 
> <P><FONT SIZE=3D2>carter at qosient.com</FONT>
> 
> <BR><FONT SIZE=3D2>Phone +1 212 813-9426</FONT>
> 
> <BR><FONT SIZE=3D2>Fax   +1 212 813-9426</FONT>
> </P>
> 
> <P><FONT SIZE=3D2>   </FONT>
> 
> <BR><FONT SIZE=3D2>   </FONT>
> </P>
> 
> <P><FONT SIZE=3D2>-----Original Message-----</FONT>
> 
> <BR><FONT SIZE=3D2>From: Peter Van Epp [<A =
> HREF=3D"mailto:vanepp at sfu.ca">mailto:vanepp at sfu.ca</A>]</FONT>
> 
> <BR><FONT SIZE=3D2>Sent: Friday, September 22, 2000 1:28 PM</FONT>
> 
> <BR><FONT SIZE=3D2>To: Carter Bullard</FONT>
> 
> <BR><FONT SIZE=3D2>Subject: Re: seg fault</FONT>
> </P>
> <BR>
> 
> <P>        <FONT SIZE=3D2>Looks to be =
> an IPX packet (in any case a non IP broadcast of some kind).</FONT>
> 
> <BR><FONT SIZE=3D2>This tcpdump file will loop argus_bpf (and it =
> segfaults when cntrl-ced).</FONT>
> </P>
> 
> <P><FONT SIZE=3D2>Peter Van Epp / Operations and Technical Support =
> </FONT>
> 
> <BR><FONT SIZE=3D2>Simon Fraser University, Burnaby, B.C. Canada</FONT>
> </P>
> <BR>
> 
> </BODY>
> </HTML>
> ------=_NextPart_000_007C_01C024B1.00AB94F0--
> 
> 