ra and srcid: bug
Wolfgang Barth
wob at swobspace.de
Wed Mar 21 15:42:58 EDT 2007
Hi Carter,
I've tested a little bit around. Host swobspace has ip 192.168.1.9
1) logfile produced with argus rc.42, all client progs rc.42:
a) ra -r argus.log -s srcid - srcid swobspace
ra[2329]: 2007-03-21 20:31:48 srcid swobspace filter syntax error
b) ra -r argus.log -s srcid - srcid 192.168.1.9
192.168.1.9
192.168.1.9
192.168.1.9
works ...
c) same effect on rabins ... filtering srcid swobspace failed, filtering
srcid 192.168.1.9 works
2) logfile produced with argus rc.39, all client progs rc.42:
a) ra -r argus.log -s srcid - srcid 192.168.1.9
no output
b) ra -r argus.log -s srcid |grep 192.168.1.9
192.168.1.9
192.168.1.9
192.168.1.9
curious ...
3) clients rc.39, logfile with argus rc.42:
argus-clients-3.0.0.rc.39/bin/ra -r argus.log -s srcid
9.1.168.192
9.1.168.192
9.1.168.192
With rc.42 the main problem is not resolving 'swobspace' to an ip address
(was working up to rc.39, rc.40 only with ra, not with rabins).
Wolfgang
--
<wob (at) swobspace de> * http://www.swobspace.de
More information about the argus
mailing list