more bugs

[Christoph Badura]

Hey Carter,

here are more notes about documentation bugs in ra(1) that I jotted down
last week. They applied to rc.39.

I also noticed with rc.40 that argus dumps core when told to read non-existing
file:
nervous-energy!bad 103 % argus -RJ -r non-existing -w /dev/null
argus[6034]: 01 Mar 07 23:11:49.537703 started

Segmentation fault (core dumped)
nervous-energy!bad 104 % 

from rc.39:
ra(1)

- man page talks about non-existing audit(8) in the NAME section.

- description of -n is wrong:

have no /etc/ra.conf nor ~/.rarc

no -n no hostname lookups done
-n suppresses port number conversion
-nn suppresses protocol number conversion
-nnn enables full translation except hostname lookup for first tcp record
-nnnn same as -n
I guess the compiled-in default changed.
but arp IP addresses are never looked up contrary to documentation

- -s option:
s/user date buffer/user data buffer/
after "suser" should come "duser" not "dvlan"

- incorrect markup in -t option at "A record iPntersects..."

- n section "OUTPUT FORMAT":

- location of "mac.addr" not described in "general format"
- talks about undocumented -m option
- "count" talks about a -c option entirely different from what is documented

- FILES section should mention ~/.rarc

- -D option has no apparent effect
should document under what conditions it has an effect

- discrepancy between troff and html man pages:

argus-clients has argus.8.html and argus.conf.5.html but man pages are
installed by argus server.
argus-clients has argus.5.htnl, ramon.1.html and raxml.1.html but no
corresponding man pages.

Keep up the good work!
--chris