ra 3.0.0 client vs 2.0.6 Argus data - Bug?

Jesper Skou Jensen jesper.skou.jensen at uni-c.dk
Thu Jan 29 07:09:29 EST 2009


Hi there,

We have been running a Argus 2.0.x server for several years now, but it
needs a hardware upgrade now. In that process we plan on changing to
Argus 3.0.0 and I'm in the middle of migrating the data and I have run
into a bit of a problem.

It seems that there is a incompatibility bug of some kind with the 3.0
ra client and the 2.0 Argus log. At least that's how it looks to me. As
far as I can find in older mails on this list and through google and
whatnot, it doesn't look like there should be any problems like this.

Did I miss a note somewhere, or is this in fact a bug?

Here below I've pasted a bit of test output from our new server running 
3.0.0. It's data from a couple of hours of argus log.

It shows that for some reason the 3.0.0 ra client doesn't seem to read 
the 2.0.6 log right. Funny enough the written file is larger than the 
original, but doesn't seem to contain nearly as many sessions/lines?


jsj at ArgusBox:/var/log/argus/test$ ls -l
total 5132579
-rw-r--r-- 1 jsj jsj 2723101704 Jan 28 12:41 argus_2.0.6.argus
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 10:35 argus_3.0.0.argus

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus |wc
17509026 158968408 2066065068

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus -w 
argus_2.0.6.argus_new

jsj at ArgusBox:/var/log/argus/test$ ls -l argus_2.0.6.argus*
total 7928751
-rw-r--r-- 1 jsj jsj 2723101704 Jan 28 12:41 argus_2.0.6.argus
-rw-r--r-- 1 jsj jsj 2860486184 Jan 28 16:08 argus_2.0.6.argus_new

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus_new |wc
1323109 11594571 156126862


jsj at ArgusBox:/var/log/argus/test$ ra -r argus_3.0.0.argus |wc
16770634 151831990 1978934806

jsj at ArgusBox:/var/log/argus/test$ ls -l argus_3.0.0.argus*
total 10399453
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 10:35 argus_3.0.0.argus
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 16:15 argus_3.0.0.argus_new

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_3.0.0.argus_new |wc
16770634 151831990 1978934806


-- 

   Jesper S. Jensen
Uni-C - Århus, Danmark







More information about the argus mailing list