[radium] ignoring filter when using multiple RADIUM_OUTPUT_FILE

[Robin Gruyters]

Hello,

I'm trying to use Radium to write to multiple output files, but one  
has to use a filter.

The man page of radium(8) says:

[...]
RADIUM_OUTPUT_FILE
        Radium  can write its output to one or a number of files, default limit
        is 5 concurrent files, each with their own independant filters.

        The format is:
             RADIUM_OUTPUT_FILE=/full/path/file/name
             RADIUM_OUTPUT_FILE=/full/path/file/name "filter"

        Most sites will have radium write to a file, for reliablity and perfor-
        mance.  The example file name is used here as supporting programs, such
        as ./support/Archive/radiumarchive are configured to use this file.

        Commandline equivalent  -w

        RADIUM_OUTPUT_FILE=/var/log/radium/radium.out
[...]

When I try to do this, the filter gets ignored.

Here is my test radium.conf file:

RADIUM_DAEMON=yes
#
RADIUM_MAR_STATUS_INTERVAL=60
#
RADIUM_ARGUS_SERVER=localhost:5611
RADIUM_ARGUS_SERVER=localhost:5612
#
RADIUM_OUTPUT_FILE=/nsm/argus/flow.argus
RADIUM_OUTPUT_FILE=/nsm/argus/customer.argus "net 82.xxx.xxx.xxx/28"
#
RADIUM_SET_PID=yes
RADIUM_PID_PATH=/var/run/nsm
#
#RADIUM_SETUSER_ID="sguil"
#RADIUM_SETGROUP_ID="sguil"

Any idea?

Kind regards,

Robin Gruyters
Network and Security Engineer
Yirdis B.V.
I: http://yirdis.com
P: +31 (0)36 5300394
F: +31 (0)36 5489119




-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: PGP Digital Signature
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070607/8bfbfb8e/attachment.sig>