ra 3.0.0 client vs 2.0.6 Argus data - Bug?
Jesper Skou Jensen
jesper.skou.jensen at uni-c.dk
Thu Jan 29 07:09:29 EST 2009
Hi there,
We have been running a Argus 2.0.x server for several years now, but it
needs a hardware upgrade now. In that process we plan on changing to
Argus 3.0.0 and I'm in the middle of migrating the data and I have run
into a bit of a problem.
It seems that there is a incompatibility bug of some kind with the 3.0
ra client and the 2.0 Argus log. At least that's how it looks to me. As
far as I can find in older mails on this list and through google and
whatnot, it doesn't look like there should be any problems like this.
Did I miss a note somewhere, or is this in fact a bug?
Here below I've pasted a bit of test output from our new server running
3.0.0. It's data from a couple of hours of argus log.
It shows that for some reason the 3.0.0 ra client doesn't seem to read
the 2.0.6 log right. Funny enough the written file is larger than the
original, but doesn't seem to contain nearly as many sessions/lines?
jsj at ArgusBox:/var/log/argus/test$ ls -l
total 5132579
-rw-r--r-- 1 jsj jsj 2723101704 Jan 28 12:41 argus_2.0.6.argus
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 10:35 argus_3.0.0.argus
jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus |wc
17509026 158968408 2066065068
jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus -w
argus_2.0.6.argus_new
jsj at ArgusBox:/var/log/argus/test$ ls -l argus_2.0.6.argus*
total 7928751
-rw-r--r-- 1 jsj jsj 2723101704 Jan 28 12:41 argus_2.0.6.argus
-rw-r--r-- 1 jsj jsj 2860486184 Jan 28 16:08 argus_2.0.6.argus_new
jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus_new |wc
1323109 11594571 156126862
jsj at ArgusBox:/var/log/argus/test$ ra -r argus_3.0.0.argus |wc
16770634 151831990 1978934806
jsj at ArgusBox:/var/log/argus/test$ ls -l argus_3.0.0.argus*
total 10399453
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 10:35 argus_3.0.0.argus
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 16:15 argus_3.0.0.argus_new
jsj at ArgusBox:/var/log/argus/test$ ra -r argus_3.0.0.argus_new |wc
16770634 151831990 1978934806
--
Jesper S. Jensen
Uni-C - Århus, Danmark
More information about the argus
mailing list