radark - argus-clients-3.0.0.rc.63

[Carter Bullard]

Hey Pablo,
Yes, you need to escape the escape :o)
Here is a patch for the file ./clients/radark.pl what will fix it.
Carter

p4 diff radark.pl
==== //depot/argus/clients/clients/radark.pl#3 - /home/carter/argus/ 
clients/clients/radark.pl ====
137c137
<       `racluster -M norep -m saddr daddr -r $RADATA/raunreach.out - 
w -  -- \(not icmp\) and \(not src net $localaddr and dst net  
$localaddr\) | racluster -m saddr -w $RADATA/darkaddress.out`;
---
 >       `racluster -M norep -m saddr daddr -r $RADATA/raunreach.out - 
w -  -- \\\(not icmp\\\) and \\\(not src net $localaddr and dst net  
$localaddr\\\) | racluster -m saddr -w $RADATA/darkaddress.out`;


On Nov 12, 2007, at 6:48 PM, Pablo J. Rebollo-Sosa wrote:

> Hi Carter,
>
> Today I was testing the radark script (argus-clients-3.0.0.rc.63).  
> It gave me the following error.
>
> root at nsm:/var/log/argus# radark -L 192.168.0.0/24 -r argus.out -N 30
> sh: Syntax error: "(" unexpected
>
> Seems that there is an error on line 137 when scaping parenthesis.
>
> Best regards,
>
> Pablo J. Rebollo
>