racluster 3.0.3.19 = ArgusGenerateRecord: time format incorrect

[Carter Bullard]

Hey Jesper,
If any previous version can read the files properly, then we can get 
argus-clients-3.0.3.20 to read them properly as well.

As a work around, and as you discovered, you may be able to correct the
files you have by reading and writing the files with the any previous version of ra*,
just as you did.  If the argus-3.0.2 client works for you, then read and
write the files with something like racluster() or rasort().

But keep a copy of the starting files, just in case.

Can you share "active" and your "active.racluster_3.0.3.19", as I don't have any files
that demonstrate the bug.  We have several reports of time problems with 19,
which has been very difficult to reproduce, so sharing would be very helpful.
Uploading to ftp://qosient.com/incoming will keep it private.

Thanks!!!!!!!

Carter

On Dec 3, 2010, at 9:04 AM, Jesper Skou Jensen wrote:

> Hi there,
> 
> I'm having some problems reading Argus logs that's been through racluster 3.0.3.19 do you have any ideas why, and how to fix this?
> 
> I sure do hope it's fix-able, because I have a bunch of files that I've already run through racluster 3.0.3.19 and I don't have the original files anymore. :-(
> 
> root at argusbox:~# racluster --version
> Racluster Version 3.0.3.19
> 
> root at argusbox:~# racluster -r active -w active.racluster_3.0.3.19
> 
> root at argusbox:~# ra -r active.racluster_3.0.3.19
> ra[17870]: 14:54:53.458393 ArgusGenerateRecord: time format incorrect:3
> 
> 
> If I use an older version I have laying around it works without any problems.
> 
> root at argusbox:~# racluster_old --version
> Racluster Version 3.0.2.beta.6
> 
> root at argusbox:~# racluster_old -r active -w active.racluster_3.0.2b6
> 
> root at argusbox:~# ra -r active.racluster_3.0.2b6
> Everything works perfectly and I get the output I expect.
> 
> -- 
> 
>  Jesper S. Jensen
> UNI-C - Århus, Danmark
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3681 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20101203/f2fd61f3/attachment.bin>