ra and srcid: bug

[Carter Bullard]

So, there is/was a little endian problem in earlier versions of 3.0.0- 
rc.x,
at least with the srcid.   So what versions are we dealing with
with these argus sources?  Are you running some argus-2.x
as well?

Carter



On Mar 20, 2007, at 4:42 PM, Wolfgang Barth wrote:

> Hi,
>
>
> argus-clients-3.0.0.rc.42/bin/ra -s srcid -r /var/log/argus/argus.log
>
> ...
>      90.130.17.172
>       3.130.17.172
>       172.17.129.2
>       3.130.17.172
>      97.130.17.172
> ...
>
> The third line is correct, the others are in wrong byte order...
>
> Filtering like "ra -r argus.log - srcid 172.17.129.2 " won't work:
> ra[18615]: 21:40:57.413454 srcid eligate2 filter syntax error
>
> I had to specify "srcid 2.129.17.172", all my scripts fails with rc.42
>
> :-((
>
> Wolfgang
> -- 
> <wob (at) swobspace de> * http://www.swobspace.de
>