Another segv in ArgusCreateIPv4Flow?

David lists at edeca.net
Tue Jul 22 04:14:43 EDT 2008


Quoting Carter Bullard <carter at qosient.com>:
> Lots of questions to ask, like the machine, architecture (seems like
> its 64-bit), what kind of interface are you capturing from, and what kind of
> packets are you expecting?   Normally we'd all need that kind of info,
> but.....

I think we can skip these this time :)

> Modify this line in ArgusProcessIpPacket() (+26 lines from the start)
>
>       model->ArgusThisUpHdr = (unsigned char *)ip;
>
> to
>       model->ArgusThisIpHdr = (unsigned char *)ip;
>
> and lets see if that makes a difference!!!   If so, I'll add it to the
> argus-3.0.1.beta.1 distibution code.

That seems to work on my development machine.  Time to get the changes  
over to the proper network too.

Thanks for the prompt reply, I didn't get time to check it until now.   
Time to get playing with the clients and figure out how they all work.

David





More information about the argus mailing list