ra 3.0.0 client vs 2.0.6 Argus data - Bug?

[carter at qosient.com]

Hey Jesper,
The data model in 3.0.0 is much different, and so the size of the file, etc, is not a good metric for comparison.
I use racount() to compare if the basic contents are the same.  

The situation where you read a 2.0.6 file and generate 2.0.6_new looks to be the one that has big problems, as it looks like you are missing 90% ?  Is ra() vaulting?

Carter


Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: Jesper Skou Jensen <jesper.skou.jensen at uni-c.dk>

Date: Thu, 29 Jan 2009 13:09:29 
To: <argus-info at lists.andrew.cmu.edu>
Subject: [ARGUS] ra 3.0.0 client vs 2.0.6 Argus data - Bug?


Hi there,

We have been running a Argus 2.0.x server for several years now, but it
needs a hardware upgrade now. In that process we plan on changing to
Argus 3.0.0 and I'm in the middle of migrating the data and I have run
into a bit of a problem.

It seems that there is a incompatibility bug of some kind with the 3.0
ra client and the 2.0 Argus log. At least that's how it looks to me. As
far as I can find in older mails on this list and through google and
whatnot, it doesn't look like there should be any problems like this.

Did I miss a note somewhere, or is this in fact a bug?

Here below I've pasted a bit of test output from our new server running 
3.0.0. It's data from a couple of hours of argus log.

It shows that for some reason the 3.0.0 ra client doesn't seem to read 
the 2.0.6 log right. Funny enough the written file is larger than the 
original, but doesn't seem to contain nearly as many sessions/lines?


jsj at ArgusBox:/var/log/argus/test$ ls -l
total 5132579
-rw-r--r-- 1 jsj jsj 2723101704 Jan 28 12:41 argus_2.0.6.argus
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 10:35 argus_3.0.0.argus

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus |wc
17509026 158968408 2066065068

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus -w 
argus_2.0.6.argus_new

jsj at ArgusBox:/var/log/argus/test$ ls -l argus_2.0.6.argus*
total 7928751
-rw-r--r-- 1 jsj jsj 2723101704 Jan 28 12:41 argus_2.0.6.argus
-rw-r--r-- 1 jsj jsj 2860486184 Jan 28 16:08 argus_2.0.6.argus_new

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_2.0.6.argus_new |wc
1323109 11594571 156126862


jsj at ArgusBox:/var/log/argus/test$ ra -r argus_3.0.0.argus |wc
16770634 151831990 1978934806

jsj at ArgusBox:/var/log/argus/test$ ls -l argus_3.0.0.argus*
total 10399453
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 10:35 argus_3.0.0.argus
-rw-r--r-- 1 jsj jsj 2527527228 Jan 28 16:15 argus_3.0.0.argus_new

jsj at ArgusBox:/var/log/argus/test$ ra -r argus_3.0.0.argus_new |wc
16770634 151831990 1978934806


-- 

   Jesper S. Jensen
Uni-C - Århus, Danmark