Minor Bug in XML output

Carter Bullard carter at qosient.com
Tue Feb 16 21:57:27 EST 2010


Hey Phillip,
Which version are you running, and are you using a comma as a field separator?  Not sure where
your comma's are coming from.  Here is what I get using the latest ra().

../bin/ra -S amon -M xml -N 1
<?xml version ="1.0" encoding="UTF-8"?>
<!--Generated by ra(3.0.3.2) QoSient, LLC-->
<ArgusDataStream
  xmlns:xsi = "http://www.w3.org/2001/XMLSchema-instance" 
  xsi:noNamespaceSchemaLocation = "http://qosient.com/argus/Xml/ArgusRecord.3.0.xsd"
  BeginDate = "2009-10-05T12:02:14.695285" CurrentDate = "2010-02-16T21:47:31.209683"
  MajorVersion = "3" MinorVersion = "0.7" InterfaceType = "DLT_NULL" InterfaceStatus = "Up"
  ArgusSourceId = "207.237.36.98"  NetAddr = "0.0.0.0"  NetMask = "0.0.0.0">

 <ArgusFlowRecord  StartTime = "2010-02-16T21:47:30.369737" Flags = " e       " Proto = "arp" SrcAddr = "207.237.192.1"" Dir = "who" DstAddr = "207.237.205.218"" SrcPkts = "1" DstPkts = "0" SrcBytes = "60" DstBytes = "0" State = "INT"></ArgusFlowRecord>
</ArgusDataStream>


Carter

On Feb 16, 2010, at 9:26 PM, Phillip G Deneault wrote:

> Playing with output from 'ra -M xml' I get...
> 
> <ArgusFlowRecord  SourceId = "192.168.1.11, StartTime = "21:12:51.990399, LastTime = "21:12:56.966699, Duration = "4.976300, Trans = "1, Flags = " e i     , SrcAddr = "192.168.1.2, Dir = "<?>, DstAddr = "192.168.1.3, Proto = "6, SrcPort = "59842, DstPort = "22,  SrcIpId = "0x4fb0, DstIpId = "0x1324, SrcPkts = "27, DstPkts = "25, SrcBytes = "2678, DstBytes = "3666, State = "CON></ArgusFlowRecord>
> 
> I assume there are suppose to be closing quotes for all those attributes?
> 
> Thanks,
> Phil
> 
> 





-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100216/05a4c3c7/attachment.bin>


More information about the argus mailing list