ipv6 changes ?

mike tancsa mike at sentex.ca
Mon Mar 19 10:55:18 EDT 2012


On 3/19/2012 10:29 AM, Carter Bullard wrote:
> Hey Mike,
> Yes, a cut copy and paster bug.  Fixed in argus-clients-3.0.5.36, which
> should
> be the last of the 5's.   
> 
>    http://qosient.com/argus/dev/argus-clients-latest-tar.gz
> 
> Please give this a quick test, if you have the time.

Hi Carter,

	The ipv6 display bug seems fixed! Thanks, but a new problem below


# ./ra -N 10 -nr /var/log/argus/argus.log - ipv6 and net 2607:f3e0::/32
         StartTime      Flgs  Proto            SrcAddr  Sport   Dir
       DstAddr  Dport  TotPkts   TotBytes State
   01:03:08.049393  *        ipv6-* 2607:f3e0:0:4::219.135       ->
ff02::1:ff00:1.0             3        270   NNS
   01:03:08.049494  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
ff02::1:ff00:219.0             3        258   NNS
   01:03:22.975201  *        ipv6-* 2607:f3e0:0:4::219.135       ->
ff02::1:ff00:1.0             3        270   NNS
   01:03:22.975259  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
ff02::1:ff00:219.0             3        258   NNS
   01:03:52.825670  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
ff02::1:ff00:219.0             3        258   NNS
   01:03:52.825572  *        ipv6-* 2607:f3e0:0:4::219.135       ->
ff02::1:ff00:1.0             3        270   NNS
   01:04:34.858073  e        ipv6-* 2607:f3e0:0:3::88*.135       ->
ff02::1:ff00:1.0             1         86   NNS
   01:05:07.450859  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
ff02::1:ff00:219.0             3        258   NNS
   01:05:07.450761  *        ipv6-* 2607:f3e0:0:4::219.135       ->
ff02::1:ff00:1.0             3        270   NNS
   01:05:22.376435  *        ipv6-* 2607:f3e0:0:4::219.135       ->
ff02::1:ff00:1.0             3        270   NNS


	Not sure why, but I am getting a compiler failure

2(pyroxene)# make
making in ./common
making in ./include
making in ./clients
making in ./examples
making in ./raconvert
making in ./radark
making in ./radump
making in ./raevent
making in ./rafilter
making in ./ragraph
making in ./ragrep
making in ./rahisto
making in ./rahosts
making in ./ralabel
making in ./rapath
making in ./rapolicy
making in ./raports
making in ./rarpwatch
making in ./raservices
making in ./rastream
making in ./rastrip
making in ./ratop
making in ./ratimerange
making in ./ratemplate
making in ./ramysql
gcc -O3 -I. -I../../include -I../../common -I/usr/local/include
-I/usr/local/include/mysql -DHAVE_CONFIG_H -c ./rasqlinsert.c
./rasqlinsert.c: In function 'argus_command_string':
./rasqlinsert.c:7034: error: incompatible type for argument 1 of
'ArgusCheckTimeFormat'
*** Error code 1

Stop in /tmp/argus-clients-3.0.5.36/examples/ramysql.
*** Error code 1

Stop in /tmp/argus-clients-3.0.5.36/examples.
*** Error code 1

Stop in /tmp/argus-clients-3.0.5.36.



> 
> Carter 
> 
> 
> 
> On Mar 16, 2012, at 10:01 AM, Carter Bullard wrote:
> 
>> Hey Mike,
>> Thanks. !!!!  I'm off line but will look at this today.
>> Carter
>>
>>
>>
>> On Mar 15, 2012, at 4:41 PM, mike tancsa <mike at sentex.ca
>> <mailto:mike at sentex.ca>> wrote:
>>
>>> Hi,
>>>   I installed the latest argus and the latest argus clients just now and
>>> noticed ipv6 is not displayed properly, or at least the default
>>> behaviour is different.
>>>
>>> eg
>>>
>>> Ra Version 3.0.5.35
>>> ra -nr /var/log/argus/argus.log -L0 -N 5 - ipv6
>>>  StartTime      Flgs  Proto            SrcAddr  Sport   Dir
>>> DstAddr  Dport  TotPkts   TotBytes State
>>>  16:30:59.505899  *           udp        0.0.128.254.62082     ->
>>>    0.0.2.255.1900          2        424   INT
>>>  16:31:00.364806  e        ipv6-*       224.243.7.38.135      <->
>>> 224.243.7.38.0             2        164   NNS
>>>  16:31:00.699194  e           udp       224.243.7.38.63992    <->
>>> 224.243.7.38.53            2        424   CON
>>>  16:31:00.699222  e           udp       224.243.7.38.52021    <->
>>> 224.243.7.38.53            2        349   CON
>>>  16:31:00.704428  e           udp       224.243.7.38.53108    <->
>>> 224.243.7.38.53            2        247   CON
>>>
>>>
>>> vs taking the same argus file and trying on
>>> Ra Version 3.0.5.19
>>> ra -nr argus.log -N5 -L0 - ipv6
>>>        StartTime      Flgs  Proto            SrcAddr  Sport   Dir
>>>      DstAddr  Dport  TotPkts   TotBytes State
>>> 03-15 16:30:59.505  *           udp fe80::25a0:e71e:d*.62082     ->
>>>      ff02::c.1900          2        424   INT
>>> 03-15 16:31:00.364  e        ipv6-*   2607:f3e0:0:3::1.135      <->
>>> 2607:f3e0:0:3::18.0             2        164   NNS
>>> 03-15 16:31:00.699  e           udp 2607:f3e0:0:4:f02*.63992    <->
>>> 2607:f3e0:80:80::3.53            2        424   CON
>>> 03-15 16:31:00.699  e           udp 2607:f3e0:0:4:f02*.52021    <->
>>> 2607:f3e0:80:80::3.53            2        349   CON
>>> 03-15 16:31:00.704  e           udp 2607:f3e0:0:4:f02*.53108    <->
>>> 2607:f3e0:80:80::3.53            2        247   CON
>>>
>>>
>>>   ---Mike
> 




More information about the argus mailing list