[ARGUS] argus-2.0.6.fixes.1/FreeBSD-4.10 <=> argus-clients-2.0.6.fixes.1/FC2

Joe Christy joe at eshu.net
Wed Aug 11 00:56:38 EDT 2004


Thanks to all who have responded seriously, both on the list and off, to 
my earlier postings. I've now devoted another 8 hours to hammering on 
(non-)interoperability and temporarily run out of ideas.

There are two new facts, one minor and one not-so-minor, I've come away 
with:
     minor) "ra -D8 -S 172.24.4.1" and "argus -S 172.24.4.1 -D8" behave 
differently(!) Just watch it in gdb; they call different functions, not 
just merely the same functions in a different order, which I might have 
been able to understand. This is invariant across gcc-2.95+FreeBSD-4.10, 
gcc-2.96+FC2, gcc-3.3+FC2, gcc-3.4+FC2.
     Not-so-minor) On FC2, intermittently, "ra -S 172.24.4.1 -D8", run 
after "ra -D8 -S 172.24.4.1" will avoid the "No data seen" & exit 
behavior to function correctly. In other words, intermittently (around 
25% of the time), "ra -D8 -S 172.24.4.1 ; "ra -S 172.24.4.1 -D8" will 
function properly. OTOH,"ra -S 172.24.4.1 -D8 ; ra -D8 -S 172.24.4.1" 
never does(!!) Once again this is invariant across gcc-2.96+FC2, 
gcc-3.3+FC2, gcc-3.4+FC2. It is also invariant across compiling and 
linking argus on FreeBSD-4.10 against the 
argus-2.0.6.fixes.1/include/pcap.h+/usr/lib/libpcap.a, 
/usr/include/pcap.h+/usr/lib/libpcap.a, and, from the FreeBSD ports, 
/usr/local/include/pcap.h+/usr/local/lib/libpcap.a (only the last two of 
which are actually consistent on FreeBSD-4.10, and only the last of 
which is also consistent with the FC2 libpcap, i.e. libpcap-0.8.3).

Does anyone have any suggestions about where to look next? Is it just 
me, or does the minor fact seem to anyone else to bear on the 
not-so-minor one?

	Joe



More information about the argus mailing list