[radium] ignoring filter when using multiple RADIUM_OUTPUT_FILE

[Carter Bullard]

Hey Robin,
Hmmm, This is fixed (for all ra* programs now) and will be in the newest
clients code, which will be up by Sunday at the latest.

Sorry for any inconvenience!!!

Carter


On Jun 7, 2007, at 4:38 AM, Robin Gruyters wrote:

> Hello,
>
> I'm trying to use Radium to write to multiple output files, but one  
> has to use a filter.
>
> The man page of radium(8) says:
>
> [...]
> RADIUM_OUTPUT_FILE
>        Radium  can write its output to one or a number of files,  
> default limit
>        is 5 concurrent files, each with their own independant filters.
>
>        The format is:
>             RADIUM_OUTPUT_FILE=/full/path/file/name
>             RADIUM_OUTPUT_FILE=/full/path/file/name "filter"
>
>        Most sites will have radium write to a file, for reliablity  
> and perfor-
>        mance.  The example file name is used here as supporting  
> programs, such
>        as ./support/Archive/radiumarchive are configured to use  
> this file.
>
>        Commandline equivalent  -w
>
>        RADIUM_OUTPUT_FILE=/var/log/radium/radium.out
> [...]
>
> When I try to do this, the filter gets ignored.
>
> Here is my test radium.conf file:
>
> RADIUM_DAEMON=yes
> #
> RADIUM_MAR_STATUS_INTERVAL=60
> #
> RADIUM_ARGUS_SERVER=localhost:5611
> RADIUM_ARGUS_SERVER=localhost:5612
> #
> RADIUM_OUTPUT_FILE=/nsm/argus/flow.argus
> RADIUM_OUTPUT_FILE=/nsm/argus/customer.argus "net 82.xxx.xxx.xxx/28"
> #
> RADIUM_SET_PID=yes
> RADIUM_PID_PATH=/var/run/nsm
> #
> #RADIUM_SETUSER_ID="sguil"
> #RADIUM_SETGROUP_ID="sguil"
>
> Any idea?
>
> Kind regards,
>
> Robin Gruyters
> Network and Security Engineer
> Yirdis B.V.
> I: http://yirdis.com
> P: +31 (0)36 5300394
> F: +31 (0)36 5489119
>
>
>
>

Carter Bullard
CEO/President
QoSient, LLC
150 E. 57th Street Suite 12D
New York, New York 10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070608/3c72b2da/attachment.html>