rabins 3.0.3.22 -t <year>/... unusable on 32-bit Ubuntu10.04

Carter Bullard carter at qosient.com
Mon Feb 14 13:49:41 EST 2011


Hey Wolfgang,
Sorry for the delay.  So you're parsing the date correctly, and setting up the correct time range
for testing, but we're not transforming the times in the flow records to the range, so you're getting
offset bin numbers like 21,564,672, which is more than you've probably got to allocate.

I'm on this now, and should have a solution today,

Carter


On Feb 7, 2011, at 12:57 PM, Wolfgang Barth wrote:

> Hey Carter,
> 
>> Sorry for the delay.  If you run with -D 2 or 3, you should see how the 32bit version is parsing the time range specification.  We allocate an array of bins for the entire time range, so if it is confused, like thinking the starting time is 0, then it will not do well allocating 4G of pointers.
> 
> First the problem version with -t '2011/02/06':
> 
> rabins[9564.c0c670b7]: 18:49:33.485551 ArgusAddFileList (0xb7649008, argus-19.log.gz, 1, -1, -1) returning -1
> rabins[9564.c0c670b7]: 18:49:33.485663 ArgusParseTime (0xb7649008, 0xb76490a4, 0xb76490d0, "2011/02/06", ' ', 0.000000) retn day(1296946800)
> rabins[9564.c0c670b7]: 18:49:33.485695 ArgusCheckTimeFormat (0xb78666a0, 2011/02/06) 1296946800.000000-1297033200.000000
> rabins[9564.c0c670b7]: 18:49:33.486159 ArgusReadConnection() read 16 bytes
> rabins[9564.c0c670b7]: 18:49:33.488693 ArgusReadConnection() read 16 bytes from pipe
> rabins[9564.c0c670b7]: 18:49:33.488763 ArgusReadConnection() read 112 bytes
> rabins[9564.c0c670b7]: 18:49:33.492596 ArgusInitAddrtoname (0xb7649008, 0x0, 0x0)
> rabins[9564.c0c670b7]: 18:49:33.492638 ArgusParseInit(0xb7649008 0xb75e7008
> rabins[9564.c0c670b7]: 18:49:33.492656 ArgusReadConnection(0xb75e7008, 1) returning 1
> rabins[9564.c0c670b7]: 18:49:33.495592 ArgusInsertRecord (0x9370820, 0x93776f0) initializing array
> rabins[9564.c0c670b7]: 18:49:33.495665 ArgusInsertRecord (0xb7649008, 0x9370820, 0x93776f0) ind 672 greater than arraylen 10 adjusting
> rabins[9564.c0c670b7]: 18:49:33.496040 ArgusInsertRecord (0xb7649008, 0x9370820, 0x93776f0, 0) ind 672 val 1296987132.501644 bin start 1296987120.000000 end 1296987180.000000
> rabins[9564.c0c670b7]: 18:49:33.496125 ArgusInsertRecord (0xb7649008, 0x9370820, 0x9378d38, 0) ind 672 val 1296987132.540914 bin start 1296987120.000000 end 1296987180.000000
> rabins[9564.c0c670b7]: 18:49:33.496191 ArgusInsertRecord (0xb7649008, 0x9370820, 0x9378d38, 0) ind 672 val 1296987132.580895 bin start 1296987120.000000 end 1296987180.000000
> rabins[9564.c0c670b7]: 18:49:33.496251 ArgusInsertRecord (0xb7649008, 0x9370820, 0x9378d38, 0) ind 672 val 1296987132.620880 bin start 1296987120.000000 end 1296987180.000000
> rabins[9564.c0c670b7]: 18:49:33.496309 ArgusInsertRecord (0xb7649008, 0x9370820, 0x9378d38, 0) ind 672 val 1296987132.660864 bin start 1296987120.000000 end 1296987180.000000
> rabins[9564.c0c670b7]: 18:49:33.496393 ArgusInsertRecord (0xb7649008, 0x9370820, 0x9378d38, 0) ind 672 val 1296987134.526094 bin start 1296987120.000000 end 1296987180.000000
> 
> 
> The working example with -t '****/02/06':
> 
> rabins[21540.c0f661b7]: 18:32:38.513514 ArgusAddFileList (0xb755c008, argus-19.log.gz, 1, -1, -1) re turning -1
> rabins[21540.c0f661b7]: 18:32:38.513622 ArgusParseTime (0xb755c008, 0xb755c0a4, 0xb755c0d0, "****/02 /06", ' ', 0.000000) retn day(3106800)
> rabins[21540.c0f661b7]: 18:32:38.513659 ArgusCheckTimeFormat (0xb77796a0, ****/02/06) 3106800.000000 -3193200.000000
> rabins[21540.c0f661b7]: 18:32:38.514118 ArgusReadConnection() read 16 bytes
> rabins[21540.c0f661b7]: 18:32:38.516668 ArgusReadConnection() read 16 bytes from pipe
> rabins[21540.c0f661b7]: 18:32:38.516737 ArgusReadConnection() read 112 bytes
> rabins[21540.c0f661b7]: 18:32:38.520778 ArgusInitAddrtoname (0xb755c008, 0x0, 0x0)
> rabins[21540.c0f661b7]: 18:32:38.520814 ArgusParseInit(0xb755c008 0xb74fa008
> rabins[21540.c0f661b7]: 18:32:38.520835 ArgusReadConnection(0xb74fa008, 1) returning 1
> rabins[21540.c0f661b7]: 18:32:38.523623 ArgusInsertRecord (0x95e3820, 0x95ea700) initializing array
> rabins[21540.c0f661b7]: 18:32:38.523698 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ea700) ind 215 64672 greater than arraylen 10 adjusting
> rabins[21540.c0f661b7]: 18:32:38.620844 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ea700, 0) ind 21564672 val 1296987132.501644 bin start 1296987120.000000 end 1296987180.000000
> rabins[21540.c0f661b7]: 18:32:38.620971 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ead40, 0) ind 21564672 val 1296987132.540914 bin start 1296987120.000000 end 1296987180.000000
> rabins[21540.c0f661b7]: 18:32:38.621036 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ead40, 0) ind 21564672 val 1296987132.580895 bin start 1296987120.000000 end 1296987180.000000
> rabins[21540.c0f661b7]: 18:32:38.621092 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ead40, 0) ind 21564672 val 1296987132.620880 bin start 1296987120.000000 end 1296987180.000000
> rabins[21540.c0f661b7]: 18:32:38.621147 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ead40, 0) ind 21564672 val 1296987132.660864 bin start 1296987120.000000 end 1296987180.000000
> rabins[21540.c0f661b7]: 18:32:38.621226 ArgusInsertRecord (0xb755c008, 0x95e3820, 0x95ead40, 0) ind 21564672 val 1296987134.526094 bin start 1296987120.000000 end 1296987180.000000
> ...
> 
> 
> Wolfgang
> -- 
> <wob (at) swobspace de> * http://www.swobspace.de
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20110214/4d91137e/attachment.bin>


More information about the argus mailing list