ra 3.0.3.17 timestamp bug & several bugs in ragraph

maketsi maketsi at gmail.com
Fri Sep 10 03:21:49 EDT 2010


There's a bug in newest ra client version 3.0.3.17. Timerange given as
unix timestamps is parsed incorrectly when the timerange spans
multiple days. This worked correctly in earlier version 3.0.3.7.

# ra -n -r argus.dat -t 1284062403-1284073203
error: invalid time range startime_t 1284148803.000000 lasttime_t
1284073203.000000
ra[26499]: 2010-09-10T09:29:33 time syntax error 1284062403-1284073203

# convdate.pl 1284062403
2010-09-09 23:00:03
# convdate.pl 1284073203
2010-09-10 02:00:03


Also, there are several bugs in ragraph 3.0.3.17 that wasn't there on
3.0.2. I haven't tested the versions between.

# ragraph pkts -M 1m -r /opt/data/argus/log/argus.dat -R
/opt/data/archive/argus/20100909 -t -3d -w test.png -no-legend -title
test -width 600 -height 300  - tcp
rabins[4557]: 1284101219.488198 ArgusCalloc: malloc error Cannot allocate memory
usage: /opt/argus/bin/ragraph metric (srcid | proto [daddr] | dport)
[-title "title"] [ra-options]
/opt/argus/bin/ragraph: unable to create `/tmp/filekgWEpm.rrd': start
time: unparsable time:

# ragraph pkts -M 1m -r /opt/data/argus/log/argus.dat -w testi.png
-no-legend -title testi -width 600 -height 300  - tcp
sh: line 1:  4578 Segmentation fault
/opt/argus-clients-3.0.3.17/bin/rabins -M hard zero -p6 -GL0 -s ltime
pkts -M 1m -r /opt/data/argus/log/argus.dat - tcp >/tmp/fileJiy88v
usage: /opt/argus/bin/ragraph metric (srcid | proto [daddr] | dport)
[-title "title"] [ra-options]
/opt/argus/bin/ragraph: unable to create `/tmp/fileJiy88v.rrd': start
time: unparsable time:

# racount -r /opt/data/argus/log/argus.dat
racount   records     total_pkts     src_pkts       dst_pkts
total_bytes        src_bytes          dst_bytes
    sum   462         0              0              0              0
               0                  0

# racount -R /opt/data/archive/argus/20100909
racount   records     total_pkts     src_pkts       dst_pkts
total_bytes        src_bytes          dst_bytes
    sum   38115       11747          11747          0
832336             832336             0

# ragraph pkts -M 5m -r argus2.dat -t -3h -w test.png -no-legend
-title test -width 600 -height 300  - tcp and port 445
rabins[26736]: 1284103070.646183 ArgusInsertRecord: ArgusCalloc error
No such file or directory
usage: /opt/argus/bin/ragraph metric (srcid | proto [daddr] | dport)
[-title "title"] [ra-options]
/opt/argus/bin/ragraph: unable to create `/tmp/fileWBDZHy.rrd': start
time: unparsable time:

# ragraph pkts -M 5m -r argus2.dat  -w test.png -no-legend -title test
-width 600 -height 300  - tcp and port 445
/opt/argus/bin/ragraph: unable to update `/tmp/filenmt2Kq.rrd':
illegal attempt to update using time 1284101700 when last update time
is 1284101700 (minimum one second step)

# racount -r argus2.dat
racount   records     total_pkts     src_pkts       dst_pkts
total_bytes        src_bytes          dst_bytes
    sum   136716      315709         313286         2423
21747340           21492415           254925

# ratimerange -r argus2.dat
2010-09-10T09:58:46 - 2010-09-10T10:19:46


Environment:

System:  Linux 2.6.28 #1 Fri Jan 16 16:25:22 EET 2009 i686 i686 i386 GNU/Linux
Arch:    i686
Paths:    /opt/argus/bin/ra /usr/sbin/tcpdump /usr/bin/make
/usr/bin/gmake /usr/bin/gcc /usr/bin/cc
RA:      Ra Version 3.0.3.17
TCPDUMP: tcpdump version 3.8 libpcap version 0.8.3

GCC:     Reading specs from /usr/lib/gcc/i386-redhat-linux/3.4.6/specs
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man
--infodir=/usr/share/info --enable-shared --enable-threads=posix
--disable-checking --with-system-zlib --enable-__cxa_atexit
--disable-lib$
Thread model: posix
gcc version 3.4.6 20060404 (Red Hat 3.4.6-10)

LIBC:
lrwxrwxrwx  1 root root 13 Nov 18  2008 /lib/libc.so.6 -> libc-2.3.4.so
-rwxr-xr-x  1 root root 1529720 Apr 15  2008 /lib/libc-2.3.4.so
-rw-r--r--  1 root root 2437028 Apr 15  2008 /usr/lib/libc.a
-rw-r--r--  1 root root 204 Apr 15  2008 /usr/lib/libc.so



More information about the argus mailing list