ArgusBug ARGUS_FILTER not honored

dbrumley at rtfm.stanford.edu dbrumley at rtfm.stanford.edu
Sat Jan 26 22:01:03 EST 2002


>Description:
Hello,
in 2.0.4 I'm not seeing that ARGUS_FILTER is honored in /etc/argus.conf

>How-To-Repeat:
put in /etc/argus.conf:
ARGUS_FILTER="not host 171.66.121.100 and not host 171.66.232.36"

strace shows the file /etc/argus.conf is read:
stat64("/etc/argus.conf", {st_mode=S_IFREG|0600, st_size=7897, ...}) = 0
brk(0)                                  = 0x81463b8
brk(0x8146538)                          = 0x8146538
brk(0x8147000)                          = 0x8147000
open("/etc/argus.conf", O_RDONLY|O_LARGEFILE) = 0


I didn't see any reason it shouldn't work from a qiuck look at the code.

>Fix:
????

>Submitter-Id: dbrumley
>Originator:    root
>Organization: Stanford
>Argus support: none
>Release:       argus-2.0
>Product:       argus
>Synopsis:      ARGUS_FILTER not honored
>Class:	        sw-bug
>Severity:      non-critical 
>Priority:      low

>Environment:   

System:  Linux paix-collector 2.4.9-13smp #1 SMP Tue Oct 30 19:57:16 EST 2001 i686 unknown
Arch:    i686

Paths:    /usr/local/sbin/argus /usr/local/bin/ra /usr/local/sbin/tcpdump /usr/bin/make /usr/bin/gmake /usr/bin/gcc /usr/bin/cc

ARGUS:   Argus Version 2.0.4
RA:      Ra Version 2.0.4
TCPDUMP: tcpdump version 3.6 libpcap version 0.6 

GCC:     Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/2.96/specs
gcc version 2.96 20000731 (Red Hat Linux 7.1 2.96-98)

LIBC:    
lrwxrwxrwx    1 root     root           13 Jan  8 14:46 /lib/libc.so.6 -> libc-2.2.4.so
-rwxr-xr-x    1 root     root      1283964 Dec  8 06:14 /lib/libc-2.2.4.so
-rw-r--r--    1 root     root     27314296 Dec  8 06:02 /usr/lib/libc.a
-rw-r--r--    1 root     root          178 Dec  8 06:02 /usr/lib/libc.so



More information about the argus mailing list