argus-2.0.5.tar.gz available

[Carter Bullard]

Hey Harald,
   Thanks for the e-mail.  Yes, there is a problem with RedHat
out of the box, as they don't distribute pcap-int.h.  I'm sure
that someone thinks that programs shouldn't rely on internal
structs, but the fact is that some routines in the libpcap
return references to 'struct pcap', a struct that has some
data that argus uses.  Unfortunately, this struct is defined
in pcap-int.h.

We use to distribute pcap-int.h in the argus
distribution, but the RedHat version, the argus version and
the current libpcap version of pcap-int.h were all different,
which was causing segmentation faults in argus on some
platforms.

   The gencode.c is actually much different from libpcap's.
We use the libpcap filter compiler that is in the libpcap
library to do the packet filtering for argus, but
we have our own filter compiler for argus to filter argus
records on output, which is a much different beast all together.
Since the syntax is similar, I just borrowed gencode.c and
started from there.

   The INSTALL file is pretty specific about the dependencies,
but I don't make a specific point about RedHat.  Maybe I should?

   Hmmmm, is there a problem with putting the docs in
/usr/share/doc?  That is the standard place, isn't it?
Would you rather it go to /home/argus/doc, /home/argus/share/doc?

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


> -----Original Message-----
> From: Harald Koch [mailto:chk at pobox.com] 
> Sent: Friday, May 03, 2002 12:04 PM
> To: carter at qosient.com
> Cc: Argus
> Subject: Re: argus-2.0.5.tar.gz available 
> 
> 
> > If you could please take a quick spin of this on your particular 
> > architecture, to make sure that there aren't any major 
> problems, that 
> > would very much appreciated.
> 
> (1) I don't know if this is a known problem or not:
> 
> configure fails out-of-the-box with RedHat Linux 7.2. Argus 
> has a dependency on pcap-int.h, which is supposed to be an 
> internal header file, and is not exported in the libpcap RPM 
> that ships with RH 7.2.
> 
> I took pcap-int.h out of several C files; the only one that 
> fails is common/gencode.c, which appears to be an old version 
> of a file that is distributed with libpcap.
> 
> As an outsider, this situation confuses me, but I guess there 
> must be a reason for it :-)
> 
> I downloaded the libpcap-0.6.2 source tree and built against 
> that, and everything built fine.
> 
> 
> (2) I ran configure --prefix=/home/argus, but "make install" 
> installed the documentation files in 
> /usr/share/doc/argus-2.0. Bad installer :-)
> 
> 
> other than that, argus is working fine on my gateway box...
> 
> -- 
> Harald Koch     <chk at pobox.com>
> 
> "It takes a child to raze a village."
> 		-Michael T. Fry
> 
>