ragraph

[carter at qosient.com]

Hey CS,
Try running the ragraph with the '-debug' option, as it maybe rabins that is having the problem.

ragraph will print out the actual rabins() command, which you can use to test where the problem might be.  

If its perl that is dumping core, well that is a little out of my job description ;o).

Is this the newest version?  Rc.33?

With "-M 60s" you are saying you want the data aggregated into 1 minute chunks/boundaries, so you may only get one data point.  If your data crosses a minute boundary, ragraph() will split it so that the data will be graphed using two data points.

Carter

Carter Bullard
QoSient LLC
150 E. 57th Street Suite 12D
New York, New York 10022
+1 212 588-9133 Phone
+1 212 588-9134 Fax  

-----Original Message-----
From: "CS Lee" <geek00l at gmail.com>
Date: Tue, 17 Oct 2006 22:23:53 
To:argus-info at lists.andrew.cmu.edu
Subject: [ARGUS] ragraph

Hey all,

I have core dump on perl when running ragraph against my argus file, I used this pcap to generate the argus data,

shell>capinfos strange-broadcast-10000.pcap
File name: strange-broadcast-10000.pcap 
File type: libpcap (tcpdump, Ethereal, etc.)
Number of packets: 10000
File size: 10536710 bytes
Data size: 10376686 bytes
Capture duration: 3.502725 seconds
Start time: Fri Oct 6 01:09:52 2006
End time: Fri Oct 6 01:09:55 2006 

You can see that the pcap file time line is between 01:09:52 to 01:09:55 which is around 3 seconds +, If I run ragraph with this option -
 
shell>ragraph bytes proto -M 60s -r strange-broadcast-10000.argus -fill -stack -w ./strange-broadcast-10000.png
Segmentation fault: 11 (core dumped)

I have core dump on perl 5.8.8. Since my data timeline is just 3 seconds and I shouldn't have using 60s which is 1 Minute, however I don't think it should generate core dump but instead report the error indeed. If i use this command line with -M 1s, ragraph runs well and generate the graph properly. 

shell>ragraph bytes proto -M 1s -r strange-broadcast-10000.argus -fill -stack -w ./strange-broadcast-10000.png

shell>ls -la strange-broadcast-10000.png
-rw-r--r-- 1 root wheel 28667 Oct 17 21:26 strange-broadcast-10000.png

By the way I'm on FreeBSD platform. 

Thanks.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>