ragrep error

Carter Bullard carter at qosient.com
Mon Oct 12 16:26:13 EDT 2009


Hey John,
This should be an older bug that should be fixed.  What versions are
you running? If you can share the argus data file, I can debug it for  
you.

Carter

On Oct 12, 2009, at 2:34 PM, John Kennedy wrote:

> I am getting an error when trying to use "ragrep -e 'TCP_DENIED' -r  
> argusfile.%H.%m.* - host <proxyIP>."
>
> ragrep[31770]: 2009-10-12 12:28:57 ArgusReadStreamSocket (0x358f0)  
> record length is zero
> ragrep[31770]: 2009-10-12 12:28:57 ArgusReadStreamSocket (0x30594)  
> record length is zero
> ragrep[31770]: 2009-10-12 12:28:57 ArgusReadStreamSocket (0x11434)  
> record length is zero
> ragrep[31770]: 2009-10-12 12:28:57 ArgusReadStreamSocket (0x11b3c)  
> record length is zero
> ragrep[31770]: 2009-10-12 12:28:57 ArgusGenerateRecord: time format  
> incorrect:131
>
>
> Please help me understand what causes this error
>
> Thanks
>
> John


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20091012/32c98c34/attachment.bin>


More information about the argus mailing list