new argus-2.0.5.tar.gz

Peter Van Epp vanepp at sfu.ca
Tue May 21 22:20:40 EDT 2002


	Unfortunatly causes the same problem in the snoop code. I take it that
the original copy from a clean libpcap makes this happiew:

gcc -O2 -I.  -I../include -DHAVE_TCP_WRAPPER=1 -DHAVE_SYS_SOCKIO_H=1 -DHAVE_STRI
NG_H=1 -DHAVE_FCNTL_H=1 -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 -DHAVE_ETHER_HOSTT
ON=1 -DHAVE_STRERROR=1 -c ./ArgusSource.c
./ArgusSource.c: In function `ArgusSnoopRead':
./ArgusSource.c:407: incompatible types in assignment
*** Error code 1

Stop in /usr/local/src/argus-2.0.5/server.
*** Error code 1

Stop in /usr/local/src/argus-2.0.5 (line 62 of Makefile).

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada


> 
> Hey Peter,
>    There is a new version of argus-2.0.5.tar.gz @
> ftp://qosient.com/dev/argus-2.0/argus-2.0.5.tar.gz
> to address the issues with OpenBSD.  I'll remake
> the rpms if this new version is cool.
> 
> Carter
> 
> Carter Bullard
> QoSient, LLC
> 300 E. 56th Street, Suite 18K
> New York, New York  10022
> 
> carter at qosient.com
> Phone +1 212 588-9133
> Fax   +1 212 588-9134
> http://qosient.com
> 
> > -----Original Message-----
> > From: owner-argus-info at lists.andrew.cmu.edu 
> > [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> > Carter Bullard
> > Sent: Tuesday, May 21, 2002 9:50 PM
> > To: 'Peter Van Epp'; 'argus'
> > Subject: RE: OpenBSD 3.1
> > 
> > 
> > Hey Peter,
> >    There is a bpf.h included in the ./include/net
> > directory of the argus distribution.  Is it possible
> > that it is getting in the way?  I'll remove the
> > local copy of ./include/net/bpf.h hoping that that
> > will solve the problem.
> > 
> >    I'll make the changes that you recommend for compat.h
> > and put up a new version tonight.
> > 
> > Carter
> > 
> > Carter Bullard
> > QoSient, LLC
> > 300 E. 56th Street, Suite 18K
> > New York, New York  10022
> > 
> > carter at qosient.com
> > Phone +1 212 588-9133
> > Fax   +1 212 588-9134
> > http://qosient.com
> > 
> > 
> > > -----Original Message-----
> > > From: owner-argus-info at lists.andrew.cmu.edu
> > > [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> > > Peter Van Epp
> > > Sent: Tuesday, May 21, 2002 5:21 PM
> > > To: argus
> > > Subject: OpenBSD 3.1
> > > 
> > > 
> > > 	Well, this looks to be an OpenBSD bug. They have changed struct
> > > timeval to struct bpf_timeval in /usr/include/pcap-int.h and 
> > > /usr/include/pcap.h but bpf_timeval isn't defined in any 
> > > other header file that I could find.
> > > 	Building a new copy of libpcap-0.7.1 beside the 
> > > argus-2.0.5 directory (and then doing a make clobber 
> > > ./configure make) fixes that (for argus, 
> > > anything else will presumably still be broken).
> > > 	While I'm here if you are running on OpenBSD or NetBSD 
> > > it is worth 
> > > checking that the bpf fix from FreeBSD has been ported across 
> > > (I haven't had time to check). Otherwise you will lose 
> > > partially filled bpf buffers when you start or stop argus 
> > > (which if you never stop argus of course isn't a problem 
> > > :-)). If you are running FreeBSD < 4.5-RELEASE, upgrade 
> > > because otherwise you have the same problem.
> > > 
> > > Peter Van Epp / Operations and Technical Support
> > > Simon Fraser University, Burnaby, B.C. Canada
> > > 
> > > 
> > 
> > 
> > 
> > 
> 
> 
> 



More information about the argus mailing list