[ARGUS] Peculiar cross platform argus/ra non-interoperability

[slif at bellsouth.net]

There may be some intermediate device interpreting
a portion of the data stream, or there may be
a mismatch in the settings of the interfaces at the endpoints.

Just a thought... Is there a VLAN connecting the argus and the ra ?
or a PPP connection ?

Best Regards,
-Mike Slifcak


> 
> From: Peter Van Epp <vanepp at sfu.ca>
> Date: 2004/08/09 Mon PM 01:56:21 EDT
> To: argus-info at lists.andrew.cmu.edu
> Subject: Re: [ARGUS] Peculiar cross platform  argus/ra non-interoperability
> 
> 	But if I read this right a socket connection from the FreeBSD host to
> the FreeBSD host works correctly? That would suggest a format difference or
> misinterpretation between FreeBSD and Linux (unfortunatly I don't currently 
> have a Linux box up to play with along with not much time :-)). A MAR record
> is a man record if you are looking at ra, and I'd guess is the initial one
> that gives the version number in this case. Its probably time to use gdb
> to catch whats coming in and see how it differs from the same thing FreeBSD
> to FreeBSD (making the assumption that is indeed working). The two are the 
> same byte order so this is somewhat strange.
> 
> Peter Van Epp / Operations and Technical Support 
> Simon Fraser University, Burnaby, B.C. Canada
> 
> On Mon, Aug 09, 2004 at 09:56:08AM -0700, Joe Christy wrote:
> >   Vis-a-vis Eric's note of 08/08/2004 09:35 PM:
> > >...
> > >Try this:
> > >
> > >$ mv -f ~/.rarc ~/.old.rarc
> > >$ ra -nnS 172.24.4.1 -T 30
> > >
> > >And tell us if anything comes up. The -a flag might be slightly
> > >deprecated.
> > 
> > 	Same mis-behavior.
>