ipv6 changes ?
mike tancsa
mike at sentex.ca
Mon Mar 19 10:55:18 EDT 2012
On 3/19/2012 10:29 AM, Carter Bullard wrote:
> Hey Mike,
> Yes, a cut copy and paster bug. Fixed in argus-clients-3.0.5.36, which
> should
> be the last of the 5's.
>
> http://qosient.com/argus/dev/argus-clients-latest-tar.gz
>
> Please give this a quick test, if you have the time.
Hi Carter,
The ipv6 display bug seems fixed! Thanks, but a new problem below
# ./ra -N 10 -nr /var/log/argus/argus.log - ipv6 and net 2607:f3e0::/32
StartTime Flgs Proto SrcAddr Sport Dir
DstAddr Dport TotPkts TotBytes State
01:03:08.049393 * ipv6-* 2607:f3e0:0:4::219.135 ->
ff02::1:ff00:1.0 3 270 NNS
01:03:08.049494 e ipv6-* 2607:f3e0:0:4:2d0*.135 ->
ff02::1:ff00:219.0 3 258 NNS
01:03:22.975201 * ipv6-* 2607:f3e0:0:4::219.135 ->
ff02::1:ff00:1.0 3 270 NNS
01:03:22.975259 e ipv6-* 2607:f3e0:0:4:2d0*.135 ->
ff02::1:ff00:219.0 3 258 NNS
01:03:52.825670 e ipv6-* 2607:f3e0:0:4:2d0*.135 ->
ff02::1:ff00:219.0 3 258 NNS
01:03:52.825572 * ipv6-* 2607:f3e0:0:4::219.135 ->
ff02::1:ff00:1.0 3 270 NNS
01:04:34.858073 e ipv6-* 2607:f3e0:0:3::88*.135 ->
ff02::1:ff00:1.0 1 86 NNS
01:05:07.450859 e ipv6-* 2607:f3e0:0:4:2d0*.135 ->
ff02::1:ff00:219.0 3 258 NNS
01:05:07.450761 * ipv6-* 2607:f3e0:0:4::219.135 ->
ff02::1:ff00:1.0 3 270 NNS
01:05:22.376435 * ipv6-* 2607:f3e0:0:4::219.135 ->
ff02::1:ff00:1.0 3 270 NNS
Not sure why, but I am getting a compiler failure
2(pyroxene)# make
making in ./common
making in ./include
making in ./clients
making in ./examples
making in ./raconvert
making in ./radark
making in ./radump
making in ./raevent
making in ./rafilter
making in ./ragraph
making in ./ragrep
making in ./rahisto
making in ./rahosts
making in ./ralabel
making in ./rapath
making in ./rapolicy
making in ./raports
making in ./rarpwatch
making in ./raservices
making in ./rastream
making in ./rastrip
making in ./ratop
making in ./ratimerange
making in ./ratemplate
making in ./ramysql
gcc -O3 -I. -I../../include -I../../common -I/usr/local/include
-I/usr/local/include/mysql -DHAVE_CONFIG_H -c ./rasqlinsert.c
./rasqlinsert.c: In function 'argus_command_string':
./rasqlinsert.c:7034: error: incompatible type for argument 1 of
'ArgusCheckTimeFormat'
*** Error code 1
Stop in /tmp/argus-clients-3.0.5.36/examples/ramysql.
*** Error code 1
Stop in /tmp/argus-clients-3.0.5.36/examples.
*** Error code 1
Stop in /tmp/argus-clients-3.0.5.36.
>
> Carter
>
>
>
> On Mar 16, 2012, at 10:01 AM, Carter Bullard wrote:
>
>> Hey Mike,
>> Thanks. !!!! I'm off line but will look at this today.
>> Carter
>>
>>
>>
>> On Mar 15, 2012, at 4:41 PM, mike tancsa <mike at sentex.ca
>> <mailto:mike at sentex.ca>> wrote:
>>
>>> Hi,
>>> I installed the latest argus and the latest argus clients just now and
>>> noticed ipv6 is not displayed properly, or at least the default
>>> behaviour is different.
>>>
>>> eg
>>>
>>> Ra Version 3.0.5.35
>>> ra -nr /var/log/argus/argus.log -L0 -N 5 - ipv6
>>> StartTime Flgs Proto SrcAddr Sport Dir
>>> DstAddr Dport TotPkts TotBytes State
>>> 16:30:59.505899 * udp 0.0.128.254.62082 ->
>>> 0.0.2.255.1900 2 424 INT
>>> 16:31:00.364806 e ipv6-* 224.243.7.38.135 <->
>>> 224.243.7.38.0 2 164 NNS
>>> 16:31:00.699194 e udp 224.243.7.38.63992 <->
>>> 224.243.7.38.53 2 424 CON
>>> 16:31:00.699222 e udp 224.243.7.38.52021 <->
>>> 224.243.7.38.53 2 349 CON
>>> 16:31:00.704428 e udp 224.243.7.38.53108 <->
>>> 224.243.7.38.53 2 247 CON
>>>
>>>
>>> vs taking the same argus file and trying on
>>> Ra Version 3.0.5.19
>>> ra -nr argus.log -N5 -L0 - ipv6
>>> StartTime Flgs Proto SrcAddr Sport Dir
>>> DstAddr Dport TotPkts TotBytes State
>>> 03-15 16:30:59.505 * udp fe80::25a0:e71e:d*.62082 ->
>>> ff02::c.1900 2 424 INT
>>> 03-15 16:31:00.364 e ipv6-* 2607:f3e0:0:3::1.135 <->
>>> 2607:f3e0:0:3::18.0 2 164 NNS
>>> 03-15 16:31:00.699 e udp 2607:f3e0:0:4:f02*.63992 <->
>>> 2607:f3e0:80:80::3.53 2 424 CON
>>> 03-15 16:31:00.699 e udp 2607:f3e0:0:4:f02*.52021 <->
>>> 2607:f3e0:80:80::3.53 2 349 CON
>>> 03-15 16:31:00.704 e udp 2607:f3e0:0:4:f02*.53108 <->
>>> 2607:f3e0:80:80::3.53 2 247 CON
>>>
>>>
>>> ---Mike
>
More information about the argus
mailing list