XML output not wellformed
Carter Bullard
carter at qosient.com
Wed Jul 22 13:42:16 EDT 2009
Hey Jochen,
Thanks I'll put it in the current code base today, and possibly up on
the
server tonight. I must have messed that up recently!?
Carter
On Jul 22, 2009, at 1:20 PM, Jochen Haemmerle wrote:
> Hi,
>
> I discovered a bug in the xml output of ra (argus-clients-3.0.2.beta.
> 9).
> As you can see in the sample below, ra always misses the last quotes
> of
> the xml attributes.
> The quick fix attached worked for me. I have no idea if it has any
> other implications.
>
> Jochen
>
>
>
> <ArgusRecord StartTime = "1233822320.886629 LastTime =
> "1233822320.887078 Flags = " e Proto = "17 SrcMacAddr =
> "xx:xx:xx:xx:xx:xx DstMacAddr = "xx:xx:xx:xx:xx:xx SrcAddr =
> "10.0.0.1 SrcPort = "xxx DstAddr = "10.0.0.1 DstPort = "xx Bytes =
> "200 SrcBytes = "78 DstBytes = "122 SrcPkts = "1 DstPkts = "1
> State
> = "CON />
>
>
>
>
> diff common/argus_util.c.orig common/argus_util.c
> 3009c3009,3013
> < sprintf(&buf[strlen(buf)], "%s ", tmpbuf);
> ---
>> if (parser->ArgusPrintXml) {
>> sprintf(&buf[strlen(buf)], "%s\"", tmpbuf);
>> }else{
>> sprintf(&buf[strlen(buf)], "%s ", tmpbuf);
>> }
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20090722/e801abfd/attachment.bin>
More information about the argus
mailing list