[ARGUS] Argus taking libpcap files from stdin

Bill Guyton guyton at bguyton.com
Tue Aug 31 23:48:02 EDT 2004


Forgive me if this has already been discussed -- I'm new to the list.

I noticed that the argus program will not take libpcap files from stdin.
For example, if I zcat a compressed tcpdump output file into argus, the
following fails:

	zcat tcp.2004080901.gz | ./argus -r - -w - | gzip > argus.log.gz

In the argus-2.0.6 code, line 228 of server/argus.c has a "fclose(stdin);",
which is keeping this from working.  Any reason this is there, or could we
possibly remove this line so that the above would work?

(I implemented a solution using named pipes, but have trouble getting argus
to exit once the input has finished for some reason).

Thanks!
Bill Guyton


$ diff -u server/argus.c.orig server/argus.c
--- server/argus.c.orig 2004-09-01 03:32:04.000000000 +0000
+++ server/argus.c      2004-09-01 03:44:47.000000000 +0000
@@ -225,7 +225,6 @@
    }
  
    ArgusProgramName = argv[0];
-   fclose(stdin);
  
    setArgusFarReportInterval (ARGUS_FARSTATUSTIMER);
    setArgusMarReportInterval (ARGUS_MARSTATUSTIMER);


-------------- next part --------------
--- server/argus.c.orig 2004-09-01 03:32:04.000000000 +0000
+++ server/argus.c      2004-09-01 03:44:47.000000000 +0000
@@ -225,7 +225,6 @@
    }
                      
    ArgusProgramName = argv[0];
-   fclose(stdin);
                                  
    setArgusFarReportInterval (ARGUS_FARSTATUSTIMER);
    setArgusMarReportInterval (ARGUS_MARSTATUSTIMER);


More information about the argus mailing list