argus/rasplit issues

[Carter Bullard]

Hey Harry,
What is the srcid for the records that are written to the IP address directory?
That will tell if its a bug or not.  Maybe that they are all management records
from a radium ?

Carter

On Jan 11, 2012, at 10:57 AM, Harry Hoffman wrote:

> Hi,
> 
> I'm running argus-3.0.5.8 and argus-clients-3.0.5.27
> 
> Argus is running with src id options of:
> ARGUS_INTERFACE=ind:eth0/"eth0",eth1/"eth1",sit1/"sit1"
> 
> where eth0 is my internet connection, eth1 is a local network connection and sit1 is a ipv6 tunnel to hurricane electric.
> 
> I'm running rasplit hourly:
> rasplit -M time 5m -r ${ARGUSDATADIR}/${ARGUSWORK} -w ${ARGUSARCHIVEDIR}/%Y/%m/%d/%H/\$srcid/argus.%Y.%m%d.%H.%M.%S
> 
> I'd expect rasplit to create directories like:
> /archive/$YEAR/$MONTH/$DAY/$HOUR/{eth0,eth1,sit1}/argus...
> 
> and this is happening but rasplit is also creating directories where eth1 is substituted with the IPAdress of eth1
> 
> /archive/2012/01/11/08/172.16.255.254
> 
> Is anyone else seeing this behavior? I'm not sure if I'm doing something wrong or if this is a bug.
> 
> Cheers,
> Harry

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120111/a34b3c5b/attachment.bin>