rabins bug if filter selects no data and no time frame isspecified

carter at qosient.com carter at qosient.com
Mon Dec 6 11:32:01 EST 2010


Hey Wolfgang,
We have a bad timestamp bug in tha 19 clients, and I'm workng it now.  Rabins is timestamp sensitive so let me provide some patches today, and let's see if things get better.

Carter
Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: Wolfgang Barth <wob at swobspace.de>
Sender: argus-info-bounces+carter=qosient.com at lists.andrew.cmu.edu
Date: Sat, 4 Dec 2010 16:45:33 
To: <argus-info at lists.andrew.cmu.edu>
Reply-To: wob at swobspace.de
Subject: [ARGUS] rabins bug if filter selects no data and no time frame is
	specified

Hi Carter,

I think there is a bug in rabins 3.0.3.19.

1) plain ra:
ra -r argus-wobgate.log - tcp dst port 443
-> exits without output, since there is no such data in the argus logfile.

2) rabins without time and selected data:
rabins -M time 1m -r argus-wobgate.log  - tcp dst port 443
-> Segmentation fault

3) now with time specification:
rabins -M time 1m -r argus-wobgate.log  -t 2010/12/04 - tcp dst port 443
-> exits normally without output

Okay, in 2) rabins don't know what should be done, but a segfault looks
like a race condition.

Wolfgang
-- 
<wob (at) swobspace de> * http://www.swobspace.de



More information about the argus mailing list