ra stdin does not work ?

[Peter Van Epp]

On Mon, Sep 01, 2003 at 05:09:30PM +0200, Fabien COELHO wrote:
> 
> Hi folks,
> 
> With version 2.0.6.beta41 on debian
> 
> shell> cat /var/log/argus/argus.log | ra -r - -
> <EMPTY>
> 
> although
> 
> shell> ra -r /var/log/argus/argus.log -
> ...
> <OK>
> 
> It seems that the '-' for stdin processing of ra and racount does not
> work.
> 
> -- 
> Fabien Coelho - coelho at cri.ensmp.fr

	You look to be correct you have uncovered a bug. On beta.13
/ clients.beta.44 (the latest versions) beta.13 ra works correctly but 
beta.44 ra doesn't for stdin:

ar2d2# pwd
/usr/local/src/argus-clients-2.0.6.beta.44/bin
r2d2# ./ra -r argus.out -n | more
18 Aug 03 20:56:22           man  229.97.122.203  v2.0                   1 0
 0        0         0            0           STA
18 Aug 03 20:56:34           udp     142.58.1.55.538    ->    142.58.1.255.gdoma
 1        0         306          0           INT
18 Aug 03 20:57:10          icmp  192.75.244.191       <->     142.58.1.10
 1        1         98           98          ECO
18 Aug 03 20:57:11          icmp  192.75.244.191       <->     142.58.1.10
 1        1         98           98          ECO
...

ar2d2# cat argus.out | ./ra -n
r2d2# cat argus.out | ./ra -n -r - -
r2d2# cat argus.out | ./ra -n -r - --
r2d2#

yet on beta.13 (where argus.out came from) it works fine. A short term solution
would be to use the ra from beta.13 (or whichever beta you have) although
the arguments are slightly different.

r2d2# pwd
/usr/local/src/argus-2.0.6.beta.13/bin
r2d2# ./ra -r argus.out -n | more
18 Aug 03 20:56:22    man version=2.0     probeid=3848370891                STA
18 Aug 03 20:56:34    udp     142.58.1.55.538    ->      142.58.1.255.538   TIM
18 Aug 03 20:57:10   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:57:11   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:56:56    udp    142.58.1.145.138    ->      142.58.1.255.138   TIM
18 Aug 03 20:57:12   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:57:13   icmp  192.75.244.191       <->       142.58.1.10       ECO
...

r2d2# cat argus.out | ./ra -n | more
18 Aug 03 20:56:22    man version=2.0     probeid=3848370891                STA
18 Aug 03 20:56:34    udp     142.58.1.55.538    ->      142.58.1.255.538   TIM
18 Aug 03 20:57:10   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:57:11   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:56:56    udp    142.58.1.145.138    ->      142.58.1.255.138   TIM
...

r2d2# cat argus.out | ./ra -n -r - | more
18 Aug 03 20:56:22    man version=2.0     probeid=3848370891                STA
18 Aug 03 20:56:34    udp     142.58.1.55.538    ->      142.58.1.255.538   TIM
18 Aug 03 20:57:10   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:57:11   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:56:56    udp    142.58.1.145.138    ->      142.58.1.255.138   TIM
18 Aug 03 20:57:12   icmp  192.75.244.191       <->       142.58.1.10       ECO
...

r2d2# cat argus.out | ./ra -n -r - -- | more
18 Aug 03 20:56:22    man version=2.0     probeid=3848370891                STA
18 Aug 03 20:56:34    udp     142.58.1.55.538    ->      142.58.1.255.538   TIM
18 Aug 03 20:57:10   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:57:11   icmp  192.75.244.191       <->       142.58.1.10       ECO
18 Aug 03 20:56:56    udp    142.58.1.145.138    ->      142.58.1.255.138   TIM
18 Aug 03 20:57:12   icmp  192.75.244.191       <->       142.58.1.10       ECO
...

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada