new development thread(s) on the server argus-3.0.5

[Carter Bullard]

Gentle people,
I've uploaded a new development thread to the server today.
argus[-clients]-3.0.5.1 is now available for development.

These threads are argus[-clients]-3.0.4 but with changes, already !!!!!!

The server has a new feature that dumps packets that generate errors to a libpcap formatted file.
This is primarily designed to sotre packets that can't be classified into flow strategies, for whatever
reason (not enough snaplen, odd protocols, whatever), so that we can debug the problems.
I would turn this on if you are getting warnings in syslog as to key flow length problems, or
protocol parsing warnings.  A new argus.conf variable is provided to turn this on.
"ARGUS_PACKET_CAPTURE_ON_ERROR", and the provide example support/Config/argus.conf is
updated to reflect the new functionality.

The clients have the changes that I mentioned in earlier mail regarding rapath().
Please give these a run, if you are having problems.

Thanks for all the support !!!!!

Carter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20110318/326aede6/attachment.bin>