ramon -N TopN or Matrix

Carter Bullard carter at qosient.com
Thu Jun 14 10:05:06 EDT 2001


Hey Michael,
   Thanks!  Yes, I'll clean up the 2.0.2 stuff so that they
are all using the same routines.  The new argus-clients
package has all of these routines standardized and consolidated
in a single library.

Could you try it out, to see if its doing the right thing?
ftp://qosient.com/dev/argus-2.0/argus-clients-2.0.1.alpha.4.tar.gz

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


-----Original Message-----
From: owner-argus-info at lists.andrew.cmu.edu
[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Michael
Sanderson
Sent: Wednesday, June 13, 2001 5:50 PM
To: argus-info at lists.andrew.cmu.edu
Subject: ramon -N TopN or Matrix


With argus 2.0.0 and 2.0.2.beta.1 on Solaris 8 Intel edition, I'm having
problems with ramon.

bin/ramon -M Matrix -r /local/argus/data
ramon: RaCreatePolicyEntry: format error

This is related to RaParseCIDRAddr() for the 255.255.255.255 addresses.
It is getting into argus_nametoaddr() which is returning 0. 
gethostbyname("255.255.255.255") on Linux and FreeBSD machines are
generating a valid return structure, but Solaris doesn't.

#0  RaParseCIDRAddr (str=0x804620f "255.255.255.255") at ./ramon.c:1681
#1  0x8058d39 in RaParsePolicyEntry (
    str=0x8172198 "Model    200   255.255.255.255     255.255.255.255

no      no       no") at ./ramon.c:1751
#2  0x8059282 in RaCreatePolicyEntry (
    str=0x8172198 "Model    200   255.255.255.255     255.255.255.255

no      no       no") at ./ramon.c:1914
#3  0x805937f in RaReadFlowModelFile (model=0x80875e0) at ./ramon.c:1961
#4  0x8055d13 in ArgusClientInit () at ./ramon.c:120 #5  0x805af49 in
main (argc=5, argv=0x8047648) at ./argus_parse.c:505

Dropping the RaParseCIDRAddr() that is found in clients/ragator.c into
clients/ramon.c gets through the RaCreatePolicyEntry() routine and
generates output that seems reasonable.

-- 
Michael Sanderson                   sanders at cs.ubc.ca
UBC Computer Science		http://www.cs.ubc.ca/spider/sanders/
					604 822 6194



More information about the argus mailing list