argus-2.0.0j option sensitivity?

[Carter Bullard]

Hey Mark,
   Your first incantation will process the file "argusfile", then it
will try to process the file "host" and then the file "10.0.0.1".
So you need to do this:
 
   ra -ncr argusfile - host 10.0.0.1
 
To generate some debugging information, be sure to these
steps:
   % touch .devel
   % ./configure
   % make clean
   % make
 
This will generate all things with the "-g" option.  From there
you should get core dumps, which will be helpful.
All you'll need to do if there is a problem:
 
   %  gdb argus_binary core
 
and the output of this will send on the way.
With Peter's help I fixed a few gotchas, so you should
refetch the package.  I'll put another one up this afternoon
argus-2.0.0k and we should go from there.
 
 
Carter

-----Original Message-----
From: Mark Poepping [mailto:poepping at cmu.edu]
Sent: Friday, September 29, 2000 1:00 AM
To: Carter Bullard
Cc: Argus (E-mail)
Subject: argus-2.0.0j option sensitvity?


 
ra -ncr argusfile host 10.0.0.1
 
doesn't appear to honor the filter, although
 
ra -r argusfile -nc host 10.0.0.1
 
seems to..
 
I'm getting some segfaults too.. just one process dying, no core..
guidance on debugging?  I turned on the firehose of about 40Mb
so a packet capture will be difficult..  It's been running at home for
a while, aok..
 
mark.
 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20000929/c5701c52/attachment.html>