Continuing in the tradition of bug reports...

Daniel V. Klein dvk at lonewolf.com
Mon Apr 13 22:15:13 EDT 2009


Here's a bug that is possibly a documentation issue, but also should  
generate a runtime error...  The command

	ra -M xml -S ns.ibp.com port 80

correctly prints only flows for port 80 in XML format, however

	ra -S ns.ibp.com -M xml port 80

prints ALL flows (TCP, UDP, regardless of port number).  The  
documentation fails to mention that an arbitrarily long list of mode  
operators may follow -M, and that both "port" and "80" are silently  
eaten as illegal modes.  I'd argue that they should be flagged as  
unrecognized, but another way around the bug is to say

	ra -S ns.ibp.com -M xml - port 80

-Dan



More information about the argus mailing list