rasplit bug on -M size?
Matt Sheridan
mattmail5050 at gmail.com
Wed Nov 4 15:25:22 EST 2009
Im sorry for two posts so close together. But this seems to be noteworthy
If I run rasplit using -M time using variables for directories and files
names ($H $M $Y, etc) works great. Directores and filenames are created with
the right variable strings. But, If I simply change "-M time" to "-M size" -
leaving everything else identical - the directory structure uses a literal
string as a name - "/%Y/%m/%d/". It stops producing the variable string. ?
So specifically:
rasplit -M time 10m -S localhost -w
/opt/IDS/argus/log/\$srcid/%Y/%m/%d/file.%Y.%m%d.%H.%M.%S
The directories and files that are created end up being /opt/IDS/argus/log/
127.0.0.1/2009/11/04/file.2009.1104.15.10.00 (as expected)
[root at xxxxx log]# cd 127.0.0.1/2009/11/04/
[root at xxxxx 04]# ls -la
total 796
drwx------ 2 root root 4096 Nov 4 15:24 .
drwx------ 3 root root 4096 Nov 4 15:24 ..
-rw------- 1 root root 799120 Nov 4 15:24 file.2009.1104.15.20.00
[root at xxxxxx 04]# pwd
/opt/IDS/argus/log/127.0.0.1/2009/11/04
However, changing only the -M to time (leaving 10m is fine since its 10 meg)
produces literal strings:
rasplit -M size 10m -S localhost -w
/opt/IDS/argus/log/\$srcid/%Y/%m/%d/file.%Y.%m%d.%H.%M.%S
[root at xxxxxxxx %d]# ls -la
total 5396
drwx------ 2 root root 4096 Nov 4 15:19 .
drwx------ 3 root root 4096 Nov 4 15:19 ..
-rw------- 1 root root 5502952 Nov 4 15:19 file.%Y.%m%d.%H.%M.%Saa
[root at xxxxxxxx %d]# pwd
/opt/IDS/argus/log/127.0.0.1/%Y/%m/%d
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20091104/8bae94ce/attachment.html>
More information about the argus
mailing list