Bug in ramon?
r.fulton at auckland.ac.nz
Fri Sep 5 04:27:22 EDT 2003
On Fri, 2003-09-05 at 20:01, Jesper S. Jensen wrote:
> First of all, I hope this is the right place to ask, if not please let
> me know where. :-)
Yup this is the right place :)
> I think I discovered a bug in ramon, at least it seems like a bug and I
> can't find any other info about it.
> Ramon Version 2.0.6.beta.39
> Debian Linux 2.4.20
> When I do a "ramon -M TopN -r argus.log" on a 740MB argus logfile, it
> first of all takes a little while before it wrties anything on the
> screen, but I figgure that's because it just takes time to process that
> much data. BUT when it finally outputs something, it looks like it hit a
> 32bit barrier, check out the following output (IP addresses replaced
> with bogus numbers).
This is a feature. Carter may have plans to extent the counters to 64
Russell Fulton, Network Security Officer, The University of Auckland,
More information about the argus