argus-clients-3.0.5.15, rabins and 32 Debian

Carter Bullard carter at qosient.com
Thu Jun 23 12:11:30 EDT 2011


Hey Wolfgang,
Yes I get the same behavior, so I'll check it out.
Carter


On Jun 23, 2011, at 3:09 AM, Wolfgang Barth wrote:

> Hey Carter,
> 
>> Hmmmm, not sure what that means.  my rabins() uses the same options you have below.
>> thoth:tmp carter$ rabins -M rmon hard zero time 1m -m smac -r test.out -s stime spkts dpkts sbytes dbytes state
> 
> I found the problem: rename your log to something like
> argus-2011-06-21-00:00:00.log and try it again.
> 
> My result:
> 
> rabins-3.0.5.15-i386 -M time 1m -r argus-2011-06-21-00:00:00.log
> 
> Rabins Version 3.0.5.15
> usage: rabins-3.0.5.15-i386 -M splitmode [splitmode options] [raoptions]
> options: -M <mode>         supported modes of operation:
> ....
> 
> Then renaming the argus logfile to argus.log:
> 
> rabins-3.0.5.15-i386 -M time 1m -r /tmp/argus.log
> 
> Same logfile, shorter name, works perfect. Seems to be a bug in filename
> parsing with ":". Replacing ":" to "_" works.
> 
> Wolfgang
> PS: the file name bug only occurs in rabins, not in ra
> -- 
> <wob (at) swobspace de> * http://www.swobspace.de
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20110623/8074ec31/attachment.bin>


More information about the argus mailing list