Minor Bug in XML output
Phillip G Deneault
deneault at WPI.EDU
Tue Feb 16 23:36:56 EST 2010
3.0.2, and I was using a "," delimiter, but of course, as soon as I remove
it, the problem goes away.
The ra clients use the delimiter in the strangest of places. I was bitten
by a similar issue back in June, only then I couldn't remove the delimiter
in the solution I was working on.
Thanks,
Phil
On Tue, 16 Feb 2010, Carter Bullard wrote:
> Hey Phillip,
> Which version are you running, and are you using a comma as a field separator? Not sure where
> your comma's are coming from. Here is what I get using the latest ra().
>
> ../bin/ra -S amon -M xml -N 1
> <?xml version ="1.0" encoding="UTF-8"?>
> <!--Generated by ra(3.0.3.2) QoSient, LLC-->
> <ArgusDataStream
> xmlns:xsi = "http://www.w3.org/2001/XMLSchema-instance"
> xsi:noNamespaceSchemaLocation = "http://qosient.com/argus/Xml/ArgusRecord.3.0.xsd"
> BeginDate = "2009-10-05T12:02:14.695285" CurrentDate = "2010-02-16T21:47:31.209683"
> MajorVersion = "3" MinorVersion = "0.7" InterfaceType = "DLT_NULL" InterfaceStatus = "Up"
> ArgusSourceId = "207.237.36.98" NetAddr = "0.0.0.0" NetMask = "0.0.0.0">
>
> <ArgusFlowRecord StartTime = "2010-02-16T21:47:30.369737" Flags = " e " Proto = "arp" SrcAddr = "207.237.192.1"" Dir = "who" DstAddr = "207.237.205.218"" SrcPkts = "1" DstPkts = "0" SrcBytes = "60" DstBytes = "0" State = "INT"></ArgusFlowRecord>
> </ArgusDataStream>
>
>
> Carter
>
> On Feb 16, 2010, at 9:26 PM, Phillip G Deneault wrote:
>
>> Playing with output from 'ra -M xml' I get...
>>
>> <ArgusFlowRecord SourceId = "192.168.1.11, StartTime = "21:12:51.990399, LastTime = "21:12:56.966699, Duration = "4.976300, Trans = "1, Flags = " e i , SrcAddr = "192.168.1.2, Dir = "<?>, DstAddr = "192.168.1.3, Proto = "6, SrcPort = "59842, DstPort = "22, SrcIpId = "0x4fb0, DstIpId = "0x1324, SrcPkts = "27, DstPkts = "25, SrcBytes = "2678, DstBytes = "3666, State = "CON></ArgusFlowRecord>
>>
>> I assume there are suppose to be closing quotes for all those attributes?
>>
>> Thanks,
>> Phil
>>
>>
>
>
>
More information about the argus
mailing list