[ARGUS] Argus taking libpcap files from stdin
Bill Guyton
guyton at bguyton.com
Tue Aug 31 23:48:02 EDT 2004
Forgive me if this has already been discussed -- I'm new to the list.
I noticed that the argus program will not take libpcap files from stdin.
For example, if I zcat a compressed tcpdump output file into argus, the
following fails:
zcat tcp.2004080901.gz | ./argus -r - -w - | gzip > argus.log.gz
In the argus-2.0.6 code, line 228 of server/argus.c has a "fclose(stdin);",
which is keeping this from working. Any reason this is there, or could we
possibly remove this line so that the above would work?
(I implemented a solution using named pipes, but have trouble getting argus
to exit once the input has finished for some reason).
Thanks!
Bill Guyton
$ diff -u server/argus.c.orig server/argus.c
--- server/argus.c.orig 2004-09-01 03:32:04.000000000 +0000
+++ server/argus.c 2004-09-01 03:44:47.000000000 +0000
@@ -225,7 +225,6 @@
}
ArgusProgramName = argv[0];
- fclose(stdin);
setArgusFarReportInterval (ARGUS_FARSTATUSTIMER);
setArgusMarReportInterval (ARGUS_MARSTATUSTIMER);
-------------- next part --------------
--- server/argus.c.orig 2004-09-01 03:32:04.000000000 +0000
+++ server/argus.c 2004-09-01 03:44:47.000000000 +0000
@@ -225,7 +225,6 @@
}
ArgusProgramName = argv[0];
- fclose(stdin);
setArgusFarReportInterval (ARGUS_FARSTATUSTIMER);
setArgusMarReportInterval (ARGUS_MARSTATUSTIMER);
More information about the argus
mailing list