radium providing random user data

Jason Carr jcarr at andrew.cmu.edu
Mon Nov 16 13:11:42 EST 2009


Hello everyone,

I'm running argus-3.0.2 server and client.  The server is running on a ppc architecture machine, specifically a Bivio box.  The client portion is running on an amd64 machine.

I use radium on the amd64 box to connect and multiplex multiple argii running on my Bivio box and it dumps the file onto disk.  Reading this file via 'ra -r filename -s +suser:128 -s +duser:128' provides all of the normal data, such as time, IPs, ports, etc.  The user data seems to be completely off.  Oddly enough connecting directly to the argii with ra on the amd64 system that radium is running on, real data is displayed.  ra on the ppc machine displays real data as well.

Any thoughts as to why this is happening?

Thanks,

Jason

--
Jason Carr
Information Security Engineer
Information Security Office




More information about the argus mailing list