R: ragraph error
Fiorenzi Alessandro
alessandro.fiorenzi at infogroup.it
Sat Aug 20 09:36:36 EDT 2011
Thanks very very much for your help!!!
You have solve my problem and explain me more than I have understand looking for manuals and tutorias.
Tanks!
Alessandro Fiorenzi
Da: Carter Bullard [mailto:carter at qosient.com]
Inviato: venerdì 19 agosto 2011 17:49
A: Fiorenzi Alessandro
Cc: Argus
Oggetto: Re: [ARGUS] ragraph error
Hey Fiorenzi,
OK, so I found the bug, interesting that it has survived so long.
We are truncating the ethernet address string, when they are reported as the source and destination address.
In your ragraph() script, you can fix this by modifying the "objwidth" value for the 'SrcAddr' and 'DstAddr'
perl variables.
In ragraph.pl, change the $objwidth assignment for '/SrcAddr/' and '/DstAddr/' to 24. Here is a patch
that works for argus-clients-3.0.5.19.
==== //depot/argus/clients/ragraph/ragraph.pl#22 - /Users/carter/argus/clients/ragraph/ragraph.pl ====
326,327c326,327
< /SrcAddr/ and do {push @typeobjects, $x; $saddrindex = $x; $objwidth = 20; };
< /DstAddr/ and do {push @typeobjects, $x; $daddrindex = $x; $objwidth = 20; };
---
> /SrcAddr/ and do {push @typeobjects, $x; $saddrindex = $x; $objwidth = 24; };
> /DstAddr/ and do {push @typeobjects, $x; $daddrindex = $x; $objwidth = 24; };
Adjust your line numbers accordingly. And all should work fine.
I've updated the ragraph.pl script for argus-clients-3.0.5.20.
Hope that works, if there is anything else, don't hesitate to holler,
Carter
On Aug 19, 2011, at 11:22 AM, Carter Bullard wrote:
Hey Fiorenzi,
The bug is in the perl script, and the error message refers to a poorly formed ethernet address ('1:0:c:cc:cc\ ').
I suspect that you are getting arp's that you hadn't gotten before, and ragraph() is having problems.
I've found a work around for the bug. If possible, filter the input to only deal with IP addresses:
ragraph bytes saddr -M 10s -r /var/log/argus/argus.out -w graph.png - ip
Also, I would recommend removing the "-R" from your command, as it conflicts with
the "-r" option and your ragraph() will go much faster if you use the "-m saddr" option.
You are graphing the aggregate "saddr" statistics, so you can pass that aggregation
rule to rabins() using the "-m saddr" option.
Try this command:
ragraph bytes saddr -m saddr -M 10s -r /var/log/argus/argus.out -w graph.png - ip
If you would rather track just subnets, rather than all the IP's you're getting, try to
aggregate on a CIDR based saddr, "-m saddr/24", like this:
ragraph bytes saddr -m saddr/24 -M 10s -r /var/log/argus/argus.out -w graph.png - ip
These features work in argus-clients-3.0.5, which you can get from the dev server.
I'll work on fixing the ethernet address issue today, along with the other reported time filter bug.
Carter
On Aug 19, 2011, at 9:32 AM, Fiorenzi Alessandro wrote:
In line answer
Da: Carter Bullard [mailto:carter at qosient.com]
Inviato: venerdì 19 agosto 2011 14:49
A: Fiorenzi Alessandro
Cc: argus-info at lists.andrew.cmu.edu<mailto:argus-info at lists.andrew.cmu.edu>
Oggetto: Re: [ARGUS] ragraph error
Buon Giorno Fiorenzi,
Haven't see this before, what version of argus-clients are you running?
I am running argus-clients-3.0.4.1.tar.gz
The command doesn't seem right:
root at atlantide:/tmp# ragraph bytes bytes saddr -M 10s -R -r /var/log/argus/argus.out -w "/var/www/realtime/Internet-Top-Talker.png"
Are the metrics correct, "bytes bytes saddr" ? Same metric 'bytes' repeated?
Sorry, there was an error of copy and paste
root at atlantide:~# ragraph bytes saddr -M 10s -R -r /var/log/argus/argus.out -w "/var/www/realtime/Internet-Top-Talker.png"
ERROR: Unknown control code at the end of ' 1:0:c:cc:cc\ '
It appears that the rabins() call in ragraph() is faulting. I suspect that there is something in the specific data that rabins() doesn't like.
To debug, we need to run rabins(), alone, with the data.
Try:
rabins -M time 10s -r /var/log/argus/argus.out -M hard
It works, I see scrooling all data to the end with no problem
If runs to completion, then the bug is in the perl script itself.
Any chance you can share your /var/log/argus/argus.out data file?
I will send you.
Ciao,
Carter
On Aug 19, 2011, at 7:08 AM, Fiorenzi Alessandro wrote:
Hi,
I use e script 1 time for minute to dispaly "realtime" evolution of use of bandwith. Ragraph is very good for thisk work.
But I have noticed some things:
I have dmesg full of rabins error
92.479812] rabins[31381]: segfault at 0 ip 0804c672 sp bff99d60 error 4 in rabins[8048000+82000]
[60412.526398] rabins[31417]: segfault at 0 ip 0804c672 sp bfcced90 error 4 in rabins[8048000+82000]
[60412.526831] rabins[31426]: segfault at 0 ip 0804c672 sp bfad0450 error 4 in rabins[8048000+82000]
[60452.612965] rabins[31470]: segfault at 0 ip 0804c672 sp bfc154d0 error 4 in rabins[8048000+82000]
[60452.616177] rabins[31468]: segfault at 0 ip 0804c672 sp bff2b2a0 error 4 in rabins[8048000+82000]
[60472.615951] rabins[31503]: segfault at 0 ip 0804c672 sp bfe58a60 error 4 in rabins[8048000+82000]
[60472.617995] rabins[31510]: segfault at 0 ip 0804c672 sp bfc0a660 error 4 in rabins[8048000+82000]
[60512.714516] rabins[31558]: segfault at 0 ip 0804c672 sp bffb90f0 error 4 in rabins[8048000+82000]
[60512.714957] rabins[31559]: segfault at 0 ip 0804c672 sp bfe8a6e0 error 4 in rabins[8048000+82000]
[60532.728741] rabins[31592]: segfault at 0 ip 0804c672 sp bfaa2bd0 error 4 in rabins[8048000+82000]
[60532.729121] rabins[31596]: segfault at 0 ip 0804c672 sp bfdc63a0 error 4 in rabins[8048000+82000]
[60571.816031] rabins[31644]: segfault at 0 ip 0804c672 sp bfd770e0 error 4 in rabins[8048000+82000]
[60571.817800] rabins[31645]: segfault at 0 ip 0804c672 sp bfd990f0 error 4 in rabins[8048000+82000]
[60591.828856] rabins[31684]: segfault at 0 ip 0804c672 sp bff1b5d0 error 4
[60591.828865] rabins[31682]: segfault at 0 ip 0804c672 sp bfb41b20 error 4 in rabins[8048000+82000] in rabins[8048000+82000]
[60591.828878]
[60631.918445] rabins[31731]: segfault at 0 ip 0804c672 sp bfb9ee70 error 4 in rabins[8048000+82000]
[60631.919211] rabins[31734]: segfault at 0 ip 0804c672 sp bfdc88e0 error 4 in rabins[8048000+82000]
[60651.959809] rabins[31770]: segfault at 0 ip 0804c672 sp bf97dd40 error 4 in rabins[8048000+82000]
[60651.961725] rabins[31771]: segfault at 0 ip 0804c672 sp bfdc3af0 error 4 in rabins[8048000+82000]
[60692.035636] rabins[31816]: segfault at 0 ip 0804c672 sp bfa29c00 error 4 in rabins[8048000+82000]
[60692.036514] rabins[31821]: segfault at 0 ip 0804c672 sp bf9f37a0 error 4 in rabins[8048000+82000]
[60712.039298] rabins[31853]: segfault at 0 ip 0804c672 sp bf9d3b90 error 4 in rabins[8048000+82000]
[60712.043703] rabins[31865]: segfault at 0 ip 0804c672 sp bfe64250 error 4 in rabins[8048000+82000]
[60752.116993] rabins[31906]: segfault at 0 ip 0804c672 sp bfcee560 error 4 in rabins[8048000+82000]
[60752.118229] rabins[31905]: segfault at 0 ip 0804c672 sp bfd2d1a0 error 4 in rabins[8048000+82000]
[60772.121024] rabins[31944]: segfault at 0 ip 0804c672 sp bfaeb960 error 4 in rabins[8048000+82000]
[60772.126697] rabins[31953]: segfault at 0 ip 0804c672 sp bfef69e0 error 4 in rabins[8048000+82000]
[60832.214821] rabins[32051]: segfault at 0 ip 0804c672 sp bfb1d2f0 error 4 in rabins[8048000+82000]
[60832.215464] rabins[32038]: segfault at 0 ip 0804c672 sp bf8f5930 error 4 in rabins[8048000+82000]
[60872.308677] rabins[32089]: segfault at 0 ip 0804c672 sp bf9f0bb0 error 4 in rabins[8048000+82000]
[60872.308844] rabins[32093]: segfault at 0 ip 0804c672 sp bf96c6f0 error 4 in rabins[8048000+82000]
[60892.323207] rabins[32131]: segfault at 0 ip 0804c672 sp bfcbf8f0 error 4 in rabins[8048000+82000]
[60892.324737] rabins[32138]: segfault at 0 ip 0804c672 sp bf82e130 error 4 in rabins[8048000+82000]
[60932.397382] rabins[32179]: segfault at 0 ip 0804c672 sp bfc1a2f0 error 4 in rabins[8048000+82000]
[60932.397562] rabins[32178]: segfault at 0 ip 0804c672 sp bf8a6300 error 4 in rabins[8048000+82000]
[64412.051663] rabins[5119]: segfault at 0 ip 0804c672 sp bf828d70 error 4 in rabins[8048000+82000]
And /tmp/filled of file* (they should be the temporary file of rapgrah elaboration I think)
Starting from 6am of this morning on the script one of the 7 ragraph statement get error:
root at atlantide:/tmp# ragraph bytes bytes saddr -M 10s -R -r /var/log/argus/argus.out -w "/var/www/realtime/Internet-Top-Talker.png"
ERROR: Unknown control code at the end of ' 1:0:c:cc:cc\ '
Whell I do not understantd where is the problem, other statements of ragraph present in the same script selecting networks to take a look of which network work consume bandwidth work fine.
Anyone have had similar problem ?
Prima di stampare, pensa all'ambiente ** Think about the environment before printing
________________________________
Il presente messaggio, inclusi gli eventuali allegati, ha natura aziendale e potrebbe contenere informazioni confidenziali e/o riservate. Chiunque lo ricevesse per errore, è pregato di avvisare tempestivamente il mittente e di cancellarlo.
E' strettamente vietata qualsiasi forma di utilizzo, riproduzione o diffusione non autorizzata del contenuto di questo messaggio o di parte di esso.
Pur essendo state assunte le dovute precauzioni per ridurre al minimo il rischio di trasmissione di virus, si suggerisce di effettuare gli opportuni controlli sui documenti allegati al presente messaggio. Non si assume alcuna responsabilità per eventuali danni o perdite derivanti dalla presenza di virus.
Per lo svolgimento delle attività di investimento nel Regno Unito, la società è autorizzata da Banca d'Italia ed è soggetta alla vigilanza limitata della Financial Services Authority. Maggiori informazioni in merito ai poteri di vigilanza della Financial Services Authority sono a disposizione previa richiesta..
Nel Regno Unito Intesa Sanpaolo S.p.A. opera attraverso la filiale di Londra, sita in 90 Queen Street, London EC4N 1SA, registrata in Inghilterra & Galles sotto No.FC016201, Branch No.BR000036
***
________________________________
This email (including any attachment) is a corporate message and may contain confidential and/or privileged and/or proprietary information. If you have received this email in error, please notify the sender immediately, do not use or share it and destroy this email. Any unauthorised use, copying or disclosure of the material in this email or of parts hereof (including reliance thereon) is strictly forbidden.
We have taken precautions to minimize the risk of transmitting software viruses but nevertheless advise you to carry out your own virus checks on any attachment of this message. We accept no liability for loss or damage caused by software viruses.
For the conduct of investment business in the UK, the Company is authorised by Banca d'Italia and subject to limited regulation in the UK by the Financial Services Authority. Details about the extent of our regulation by the Financial Services Authority are available from us on request.
In the UK Intesa Sanpaolo S.p.A. operates through its London Branch, located at 90 Queen Street, London EC4N 1SA. Registered in England & Wales under No.FC016201, Branch No.BR000036
Prima di stampare, pensa all'ambiente ** Think about the environment before printing
________________________________
Il presente messaggio, inclusi gli eventuali allegati, ha natura aziendale e potrebbe contenere informazioni confidenziali e/o riservate. Chiunque lo ricevesse per errore, è pregato di avvisare tempestivamente il mittente e di cancellarlo.
E' strettamente vietata qualsiasi forma di utilizzo, riproduzione o diffusione non autorizzata del contenuto di questo messaggio o di parte di esso.
Pur essendo state assunte le dovute precauzioni per ridurre al minimo il rischio di trasmissione di virus, si suggerisce di effettuare gli opportuni controlli sui documenti allegati al presente messaggio. Non si assume alcuna responsabilità per eventuali danni o perdite derivanti dalla presenza di virus.
Per lo svolgimento delle attività di investimento nel Regno Unito, la società è autorizzata da Banca d'Italia ed è soggetta alla vigilanza limitata della Financial Services Authority. Maggiori informazioni in merito ai poteri di vigilanza della Financial Services Authority sono a disposizione previa richiesta..
Nel Regno Unito Intesa Sanpaolo S.p.A. opera attraverso la filiale di Londra, sita in 90 Queen Street, London EC4N 1SA, registrata in Inghilterra & Galles sotto No.FC016201, Branch No.BR000036
***
________________________________
This email (including any attachment) is a corporate message and may contain confidential and/or privileged and/or proprietary information. If you have received this email in error, please notify the sender immediately, do not use or share it and destroy this email. Any unauthorised use, copying or disclosure of the material in this email or of parts hereof (including reliance thereon) is strictly forbidden.
We have taken precautions to minimize the risk of transmitting software viruses but nevertheless advise you to carry out your own virus checks on any attachment of this message. We accept no liability for loss or damage caused by software viruses.
For the conduct of investment business in the UK, the Company is authorised by Banca d'Italia and subject to limited regulation in the UK by the Financial Services Authority. Details about the extent of our regulation by the Financial Services Authority are available from us on request.
In the UK Intesa Sanpaolo S.p.A. operates through its London Branch, located at 90 Queen Street, London EC4N 1SA. Registered in England & Wales under No.FC016201, Branch No.BR000036
Prima di stampare, pensa all'ambiente ** Think about the environment before printing
________________________________
Il presente messaggio, inclusi gli eventuali allegati, ha natura aziendale e potrebbe contenere informazioni confidenziali e/o riservate. Chiunque lo ricevesse per errore, è pregato di avvisare tempestivamente il mittente e di cancellarlo.
E' strettamente vietata qualsiasi forma di utilizzo, riproduzione o diffusione non autorizzata del contenuto di questo messaggio o di parte di esso.
Pur essendo state assunte le dovute precauzioni per ridurre al minimo il rischio di trasmissione di virus, si suggerisce di effettuare gli opportuni controlli sui documenti allegati al presente messaggio. Non si assume alcuna responsabilità per eventuali danni o perdite derivanti dalla presenza di virus.
Per lo svolgimento delle attività di investimento nel Regno Unito, la società è autorizzata da Banca d'Italia ed è soggetta alla vigilanza limitata della Financial Services Authority. Maggiori informazioni in merito ai poteri di vigilanza della Financial Services Authority sono a disposizione previa richiesta..
Nel Regno Unito Intesa Sanpaolo S.p.A. opera attraverso la filiale di Londra, sita in 90 Queen Street, London EC4N 1SA, registrata in Inghilterra & Galles sotto No.FC016201, Branch No.BR000036
***
________________________________
This email (including any attachment) is a corporate message and may contain confidential and/or privileged and/or proprietary information. If you have received this email in error, please notify the sender immediately, do not use or share it and destroy this email. Any unauthorised use, copying or disclosure of the material in this email or of parts hereof (including reliance thereon) is strictly forbidden.
We have taken precautions to minimize the risk of transmitting software viruses but nevertheless advise you to carry out your own virus checks on any attachment of this message. We accept no liability for loss or damage caused by software viruses.
For the conduct of investment business in the UK, the Company is authorised by Banca d'Italia and subject to limited regulation in the UK by the Financial Services Authority. Details about the extent of our regulation by the Financial Services Authority are available from us on request.
In the UK Intesa Sanpaolo S.p.A. operates through its London Branch, located at 90 Queen Street, London EC4N 1SA. Registered in England & Wales under No.FC016201, Branch No.BR000036
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20110820/13514616/attachment.html>
More information about the argus
mailing list