RA_FIELD_WIDTH issue in argus-clients-3.0.6

Mike Iglesias iglesias at uci.edu
Tue Apr 17 12:12:50 EDT 2012


On 04/16/2012 04:41 PM, Carter Bullard wrote:
> Hey Mike,
> The ' * ' is indicating that your data string is larger than the default size
> for the field.
> " fixed " means that you will cut off the field to the size specified in the
> RA_FIELD_SPECIFIER,
> or the default length.
> 
> You need to provide a field width number on the "stime" field in
> your RA_FIELD_SPECIFIER
> to get the whole thing printed out.
> 
> Try something like this:
> 
>  
>  RA_FIELD_SPECIFIER="stime:18,flgs,proto,saddr,sport,dir,daddr,dport,spkts,dpkts,sbytes,dbytes,state"
> 
> If that doesn't do it, send some email soon.

That fixed it, thanks.  I must have missed the info on that change...


Mike



More information about the argus mailing list