Bug in ramon?

Russell Fulton r.fulton at auckland.ac.nz
Fri Sep 5 04:27:22 EDT 2003

On Fri, 2003-09-05 at 20:01, Jesper S. Jensen wrote:
> First of all, I hope this is the right place to ask, if not please let 
> me know where. :-)

Yup this is the right place :)
> I think I discovered a bug in ramon, at least it seems like a bug and I 
> can't find any other info about it.
> Ramon Version 2.0.6.beta.39
> Debian Linux 2.4.20
> When I do a "ramon -M TopN -r argus.log" on a 740MB argus logfile, it 
> first of all takes a little while before it wrties anything on the 
> screen, but I figgure that's because it just takes time to process that 
> much data. BUT when it finally outputs something, it looks like it hit a 
> 32bit barrier, check out the following output (IP addresses replaced 
> with bogus numbers).

This is a feature.  Carter may have plans to extent the counters to 64

Russell Fulton, Network Security Officer, The University of Auckland,
New Zealand.

More information about the argus mailing list