ArgusBug ARGUS_FILTER not honored
dbrumley at rtfm.stanford.edu
dbrumley at rtfm.stanford.edu
Sat Jan 26 22:01:03 EST 2002
>Description:
Hello,
in 2.0.4 I'm not seeing that ARGUS_FILTER is honored in /etc/argus.conf
>How-To-Repeat:
put in /etc/argus.conf:
ARGUS_FILTER="not host 171.66.121.100 and not host 171.66.232.36"
strace shows the file /etc/argus.conf is read:
stat64("/etc/argus.conf", {st_mode=S_IFREG|0600, st_size=7897, ...}) = 0
brk(0) = 0x81463b8
brk(0x8146538) = 0x8146538
brk(0x8147000) = 0x8147000
open("/etc/argus.conf", O_RDONLY|O_LARGEFILE) = 0
I didn't see any reason it shouldn't work from a qiuck look at the code.
>Fix:
????
>Submitter-Id: dbrumley
>Originator: root
>Organization: Stanford
>Argus support: none
>Release: argus-2.0
>Product: argus
>Synopsis: ARGUS_FILTER not honored
>Class: sw-bug
>Severity: non-critical
>Priority: low
>Environment:
System: Linux paix-collector 2.4.9-13smp #1 SMP Tue Oct 30 19:57:16 EST 2001 i686 unknown
Arch: i686
Paths: /usr/local/sbin/argus /usr/local/bin/ra /usr/local/sbin/tcpdump /usr/bin/make /usr/bin/gmake /usr/bin/gcc /usr/bin/cc
ARGUS: Argus Version 2.0.4
RA: Ra Version 2.0.4
TCPDUMP: tcpdump version 3.6 libpcap version 0.6
GCC: Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/2.96/specs
gcc version 2.96 20000731 (Red Hat Linux 7.1 2.96-98)
LIBC:
lrwxrwxrwx 1 root root 13 Jan 8 14:46 /lib/libc.so.6 -> libc-2.2.4.so
-rwxr-xr-x 1 root root 1283964 Dec 8 06:14 /lib/libc-2.2.4.so
-rw-r--r-- 1 root root 27314296 Dec 8 06:02 /usr/lib/libc.a
-rw-r--r-- 1 root root 178 Dec 8 06:02 /usr/lib/libc.so
More information about the argus
mailing list