problem with to read rasplit -w

[Carter Bullard]

Hey Jean-Marc,
If you can share an argus data file that can't be read, that will help  
a lot!!
You can email directly to me, or upload to ftp://qosient.com/incoming.

Can you send the command line options that you are using with rasplit()?

There was a serious bug in rasplit() a few months ago.  Although the bug
was unrelated to this type of behavior,  do you remember what version of
rasplit() generated the corrupt files?

Carter

On Aug 26, 2009, at 5:20 AM, jean-marc pouchoulon wrote:

> Helo argus list,
>
> I'm using rasplit -w to receive cisco netflow and create files every  
> hour.
> For a  few month now, some files (not all of them ) are unreadable  
> with ra, ra  which stopped quickly with  no error messages.
>
> I compiled ra with .debug/.dev  :
>
> ./ra -r /var/argus/2009/08/26/argus_02\:00\:00
> ra[23032.4009d4b7]: 11:13:50.533640 ArgusParseResourceFile (/ 
> root/.rarc) returning 1
> ra[23032.4009d4b7]: 11:13:50.534344 ArgusAddFileList (0xb7cfd008, / 
> var/argus/2009/08/26/argus_02:00:00, 1, -1, -1) returning -1
> ra[23032.4009d4b7]: 11:13:50.534486 ArgusReadConnection() read 16  
> bytes
> ra[23032.4009d4b7]: 11:13:50.534567 ArgusReadConnection(0xb7c9b008,  
> 1) returning -1
> ra[23032.4009d4b7]: 11:13:50.534616 main: ArgusReadFile (/var/argus/ 
> 2009/08/26/argus_02:00:00) done
> ra[23032.4009d4b7]: 11:13:50.534662 main: reading files completed
> ra[23032.4009d4b7]: 11:13:50.534717 ArgusShutDown (1)
> ra[23032.4009d4b7]: 11:13:50.534766 RaParseComplete(caught signal 0)
> ra[23032.4009d4b7]: 11:13:50.534821 ArgusDeleteQueue (0x83590f8)  
> returning
> ra[23032.4009d4b7]: 11:13:50.534877 ArgusDeleteQueue (0x8359128)  
> returning
> ra[23032.4009d4b7]: 11:13:50.534925 RaParseComplete(caught signal 1)
>
>
> I try to use argus-client  Version 3.0.2.beta.12  with no more  
> success.
> I can read directly netflow udp packet with ra.
> OS CentOS release 5.3
>
> thanks for your help.
>
>
>
> jean-marc.
>
>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090826/2819dd0b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090826/2819dd0b/attachment.bin>