RAPolicy (user) fail

[Carter Bullard]

Hey dn1nj4,
Hmmmm, not your issue, it's a porting bug in rapolicy.c.  This patch should do the trick.
Carter

==== //depot/argus-3.0.4/clients/clients/rapolicy.c#1 - /Users/carter/argus/release/argus-3.0.4/clients/clients/rapolicy.c ====
175c175
<                   switch (flow->hdr.argus_dsrvl8.qual) {
---
>                   switch (flow->hdr.argus_dsrvl8.qual & 0x1F) {


> I am apparently having some n00b problems with rapolicy.  I can't get
> it to report anything.  I am using v3.0.4.1 and using a simple
> deny.acl list that looks like this:
> 
> access-list 102 deny ip any any
> 
> Then, I run rapolicy with the following command-line:
> 
> rapolicy -f deny.acl -r argus_file
> 
> No matter what argus capture file I use, I get no results.  Any
> assistance would be appreciated.
> 
> dn1nj4
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20110621/c4a9f1a7/attachment.bin>