new argus-2.0.5.tar.gz

Carter Bullard carter at qosient.com
Fri May 31 07:43:15 EDT 2002


Hey Peter,
   Could you test the newest 2.0.5 to see if configure
does the right thing on the X_BSDs?  I've fixed the
LARGEFILE support, and I need a sanity check.  It works
on Linux and Solaris.

Thanks,  Hows it going?!

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu 
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> Peter Van Epp
> Sent: Tuesday, May 21, 2002 10:21 PM
> To: carter at qosient.com
> Cc: argus
> Subject: Re: new argus-2.0.5.tar.gz
> 
> 
> 	Unfortunatly causes the same problem in the snoop code. 
> I take it that the original copy from a clean libpcap makes 
> this happiew:
> 
> gcc -O2 -I.  -I../include -DHAVE_TCP_WRAPPER=1 
> -DHAVE_SYS_SOCKIO_H=1 -DHAVE_STRI NG_H=1 -DHAVE_FCNTL_H=1 
> -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 -DHAVE_ETHER_HOSTT ON=1 
> -DHAVE_STRERROR=1 -c ./ArgusSource.c
> ./ArgusSource.c: In function `ArgusSnoopRead':
> ./ArgusSource.c:407: incompatible types in assignment
> *** Error code 1
> 
> Stop in /usr/local/src/argus-2.0.5/server.
> *** Error code 1
> 
> Stop in /usr/local/src/argus-2.0.5 (line 62 of Makefile).
> 
> Peter Van Epp / Operations and Technical Support 
> Simon Fraser University, Burnaby, B.C. Canada
> 
> 
> > 
> > Hey Peter,
> >    There is a new version of argus-2.0.5.tar.gz @ 
> > ftp://qosient.com/dev/argus-2.0/argus-2.0.5.tar.gz
> > to address the issues with OpenBSD.  I'll remake
> > the rpms if this new version is cool.
> > 
> > Carter
> > 
> > Carter Bullard
> > QoSient, LLC
> > 300 E. 56th Street, Suite 18K
> > New York, New York  10022
> > 
> > carter at qosient.com
> > Phone +1 212 588-9133
> > Fax   +1 212 588-9134
> > http://qosient.com
> > 
> > > -----Original Message-----
> > > From: owner-argus-info at lists.andrew.cmu.edu
> > > [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> > > Carter Bullard
> > > Sent: Tuesday, May 21, 2002 9:50 PM
> > > To: 'Peter Van Epp'; 'argus'
> > > Subject: RE: OpenBSD 3.1
> > > 
> > > 
> > > Hey Peter,
> > >    There is a bpf.h included in the ./include/net
> > > directory of the argus distribution.  Is it possible
> > > that it is getting in the way?  I'll remove the
> > > local copy of ./include/net/bpf.h hoping that that
> > > will solve the problem.
> > > 
> > >    I'll make the changes that you recommend for compat.h 
> and put up 
> > > a new version tonight.
> > > 
> > > Carter
> > > 
> > > Carter Bullard
> > > QoSient, LLC
> > > 300 E. 56th Street, Suite 18K
> > > New York, New York  10022
> > > 
> > > carter at qosient.com
> > > Phone +1 212 588-9133
> > > Fax   +1 212 588-9134
> > > http://qosient.com
> > > 
> > > 
> > > > -----Original Message-----
> > > > From: owner-argus-info at lists.andrew.cmu.edu
> > > > [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of
> > > > Peter Van Epp
> > > > Sent: Tuesday, May 21, 2002 5:21 PM
> > > > To: argus
> > > > Subject: OpenBSD 3.1
> > > > 
> > > > 
> > > > 	Well, this looks to be an OpenBSD bug. They 
> have changed struct 
> > > > timeval to struct bpf_timeval in /usr/include/pcap-int.h and 
> > > > /usr/include/pcap.h but bpf_timeval isn't defined in any other 
> > > > header file that I could find.
> > > > 	Building a new copy of libpcap-0.7.1 beside the
> > > > argus-2.0.5 directory (and then doing a make clobber 
> > > > ./configure make) fixes that (for argus, 
> > > > anything else will presumably still be broken).
> > > > 	While I'm here if you are running on OpenBSD or NetBSD 
> > > > it is worth 
> > > > checking that the bpf fix from FreeBSD has been ported across 
> > > > (I haven't had time to check). Otherwise you will lose 
> > > > partially filled bpf buffers when you start or stop argus 
> > > > (which if you never stop argus of course isn't a problem 
> > > > :-)). If you are running FreeBSD < 4.5-RELEASE, upgrade 
> > > > because otherwise you have the same problem.
> > > > 
> > > > Peter Van Epp / Operations and Technical Support
> > > > Simon Fraser University, Burnaby, B.C. Canada
> > > > 
> > > > 
> > > 
> > > 
> > > 
> > > 
> > 
> > 
> > 
> 
> 
> 



More information about the argus mailing list