Argus-3.0

Carter Bullard carter at qosient.com
Thu Jun 8 00:38:05 EDT 2006


Well, the final record is a stop (STP) record, so argus did
terminate gracefully, for whatever reason, and cleanly
closed all its connections, so that is good (rather than
a hard failure).   It may have thought its input failed, and
so it just ended.  Maybe something in the system message
log?

ragraph.pl will not do well with mkdep, so I have to fix that.
Perl scripts and c compilers aren't quite the same thing ;o)

I think I got most of the other errors fixed in rc.2, which is on
the server now, except the weird one about inline being
redefined.

Carter



On Jun 8, 2006, at 12:18 AM, Peter Van Epp wrote:

> 	We look to have a couple of minor issues in clients on Suse but  
> nothing
> major (which is to say ra works :-)):
>
> ragraph looks unhappy:
>
> make[1]: Entering directory `/usr/local/src/argus-clients-3.0.0.rc. 
> 1/ragraph'
> ../bin/mkdep -c gcc -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" - 
> DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT= 
> \"\" -DARGUSDEBUG=1 -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 - 
> DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 - 
> DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -D_FILE_OFFSET_BITS=64 - 
> DARGUS_THREADS=1 -DHAVE_TCP_WRAPPER=1 -DHAVE_STRING_H=1 - 
> DHAVE_FCNTL_H=1 -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 - 
> DHAVE_ETHER_HOSTTON=1 -DHAVE_STRERROR=1 -DHAVE_STRTOF=1 - 
> DSTDC_HEADERS=1  -I. -I../include -I../common
> gcc: no input files
> make[1]: Leaving directory `/usr/local/src/argus-clients-3.0.0.rc.1/ 
> ragraph'
>
> 	and we get a warning on inline (which may break something but not
> apparantly ra :-)):
>
>
> gcc -g  -Wall -Wmissing-prototypes -Wstrict-prototypes -pthread  - 
> I. -I../include  -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" - 
> DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT= 
> \"\" -DARGUSDEBUG=1 -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 - 
> DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 - 
> DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -D_FILE_OFFSET_BITS=64 - 
> DARGUS_THREADS=1 -DHAVE_TCP_WRAPPER=1 -DHAVE_STRING_H=1 - 
> DHAVE_FCNTL_H=1 -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 - 
> DHAVE_ETHER_HOSTTON=1 -DHAVE_STRERROR=1 -DHAVE_STRTOF=1 - 
> DSTDC_HEADERS=1  -DARGUS_SYSLOG -c ./argus_main.c
> In file included from ../include/argus_client.h:56,
>                  from argus_main.c:75:
> ../include/argus_int.h:35:1: warning: "inline" redefined
> In file included from /usr/include/asm/sigcontext.h:4,
>                  from /usr/include/bits/sigcontext.h:28,
>                  from /usr/include/signal.h:333,
>                  from argus_main.c:71:
> /usr/include/linux/compiler.h:12:1: warning: this is the location  
> of the previous definition
>
> 	a no prototype warning:
>
> gcc -g  -Wall -Wmissing-prototypes -Wstrict-prototypes -pthread  - 
> I. -I../include  -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" - 
> DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT= 
> \"\" -DARGUSDEBUG=1 -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 - 
> DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 - 
> DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -D_FILE_OFFSET_BITS=64 - 
> DARGUS_THREADS=1 -DHAVE_TCP_WRAPPER=1 -DHAVE_STRING_H=1 - 
> DHAVE_FCNTL_H=1 -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 - 
> DHAVE_ETHER_HOSTTON=1 -DHAVE_STRERROR=1 -DHAVE_STRTOF=1 - 
> DSTDC_HEADERS=1  -DARGUS_SYSLOG -c ./argus_client.c
> argus_client.c:8844: warning: no previous prototype for  
> `RaSortSrvSignatures'
> rm -f ../lib/argus_client.a; ar qc ../lib/argus_client.a  
> argus_client.o
> ranlib ../lib/argus_client.a
> make[1]: Leaving directory `/usr/local/src/argus-clients-3.0.0.rc.1/ 
> common'
>
> 	and a linker error in rastrip but that appears to be because it  
> didn't
> compile it anywhere (although an rastrip.o exists).
>
> gcc -g  -Wall -Wmissing-prototypes -Wstrict-prototypes -pthread  - 
> o ../bin/rastrip rastrip.o ../lib/argus_parse.a ../lib/ 
> argus_common.a ../lib/argus_client.a -lm
> rastrip.o: file not recognized: File format not recognized
> collect2: ld returned 1 exit status
> make[1]: *** [../bin/rastrip] Error 1
>
> 	There also isn't anything obvious in the ra output as to why argus
> died so that will require more poking at:
>
> ...
> 13:32:06.284819  v            6       142.58.217.9.4245      ? 
> >       207.46.0.120.1863          1         63   CON
> 13:32:06.289940  v            6     142.58.233.220.1566      ->      
> 142.58.101.189.80            5        853   FIN
> 13:32:06.290279  v   F        4       142.58.29.57           ->      
> 142.58.203.236               1       1402   INT
> 13:32:06.290463  v           17      142.58.71.177.3690      - 
> >      222.166.31.15.36736         1         65   INT
> 13:32:06.291347  v   F        4       142.58.29.57           ->      
> 142.58.203.236               1       1402   INT
> 13:32:06.291779  v            6      154.5.131.190.1807      - 
> >      142.58.211.84.80            2        132   ACC
> 13:31:58.945985             man                  0       
> 0                     2016      1   392290    7312388   STP
>
>
> Peter Van Epp / Operations and Technical Support
> Simon Fraser University, Burnaby, B.C. Canada
>





More information about the argus mailing list