ra and srcid: bug

Wolfgang Barth wob at swobspace.de
Wed Mar 21 15:42:58 EDT 2007


Hi Carter,

I've tested a little bit around. Host swobspace has ip 192.168.1.9

1) logfile produced with argus rc.42, all client progs rc.42:

a) ra -r argus.log -s srcid - srcid swobspace
   ra[2329]: 2007-03-21 20:31:48 srcid swobspace filter syntax error

b) ra -r argus.log -s srcid - srcid 192.168.1.9
       192.168.1.9
       192.168.1.9
       192.168.1.9
   works ...

c) same effect on rabins ... filtering srcid swobspace failed, filtering
   srcid 192.168.1.9 works

2) logfile produced with argus rc.39, all client progs rc.42:

a) ra -r argus.log -s srcid  - srcid 192.168.1.9
   no output

b) ra -r argus.log -s srcid |grep 192.168.1.9
          192.168.1.9
	  192.168.1.9
	  192.168.1.9
   curious ...

3) clients rc.39, logfile with argus rc.42:

   argus-clients-3.0.0.rc.39/bin/ra -r argus.log -s srcid
          9.1.168.192
	  9.1.168.192
	  9.1.168.192


With rc.42 the main problem is not resolving 'swobspace' to an ip address
(was working up to rc.39, rc.40 only with ra, not with rabins).

Wolfgang
-- 
<wob (at) swobspace de> * http://www.swobspace.de



More information about the argus mailing list