ipv6 changes ?

Carter Bullard carter at qosient.com
Mon Mar 19 16:55:04 EDT 2012


Hmmm, you must be running with a #define I normally don't see.
Here is a patch that should fix your compiler problem:

==== //depot/argus/clients/examples/ramysql/rasqlinsert.c#7 - /Volumes/Users/carter/argus/clients/examples/ramysql/rasqlinsert.c ====
3552c3552
<                ArgusCheckTimeFormat (ArgusParser->RaTmStruct, ArgusParser->timearg);
---
>                ArgusCheckTimeFormat (&ArgusParser->RaTmStruct, ArgusParser->timearg);
7034c7034
<             ArgusCheckTimeFormat (ArgusParser->RaTmStruct, ArgusParser->timearg);
---
>             ArgusCheckTimeFormat (&ArgusParser->RaTmStruct, ArgusParser->timearg);

Give those a try
Carter


On Mar 19, 2012, at 10:55 AM, mike tancsa wrote:

> On 3/19/2012 10:29 AM, Carter Bullard wrote:
>> Hey Mike,
>> Yes, a cut copy and paster bug.  Fixed in argus-clients-3.0.5.36, which
>> should
>> be the last of the 5's.   
>> 
>>   http://qosient.com/argus/dev/argus-clients-latest-tar.gz
>> 
>> Please give this a quick test, if you have the time.
> 
> Hi Carter,
> 
> 	The ipv6 display bug seems fixed! Thanks, but a new problem below
> 
> 
> # ./ra -N 10 -nr /var/log/argus/argus.log - ipv6 and net 2607:f3e0::/32
>         StartTime      Flgs  Proto            SrcAddr  Sport   Dir
>       DstAddr  Dport  TotPkts   TotBytes State
>   01:03:08.049393  *        ipv6-* 2607:f3e0:0:4::219.135       ->
> ff02::1:ff00:1.0             3        270   NNS
>   01:03:08.049494  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
> ff02::1:ff00:219.0             3        258   NNS
>   01:03:22.975201  *        ipv6-* 2607:f3e0:0:4::219.135       ->
> ff02::1:ff00:1.0             3        270   NNS
>   01:03:22.975259  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
> ff02::1:ff00:219.0             3        258   NNS
>   01:03:52.825670  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
> ff02::1:ff00:219.0             3        258   NNS
>   01:03:52.825572  *        ipv6-* 2607:f3e0:0:4::219.135       ->
> ff02::1:ff00:1.0             3        270   NNS
>   01:04:34.858073  e        ipv6-* 2607:f3e0:0:3::88*.135       ->
> ff02::1:ff00:1.0             1         86   NNS
>   01:05:07.450859  e        ipv6-* 2607:f3e0:0:4:2d0*.135       ->
> ff02::1:ff00:219.0             3        258   NNS
>   01:05:07.450761  *        ipv6-* 2607:f3e0:0:4::219.135       ->
> ff02::1:ff00:1.0             3        270   NNS
>   01:05:22.376435  *        ipv6-* 2607:f3e0:0:4::219.135       ->
> ff02::1:ff00:1.0             3        270   NNS
> 
> 
> 	Not sure why, but I am getting a compiler failure
> 
> 2(pyroxene)# make
> making in ./common
> making in ./include
> making in ./clients
> making in ./examples
> making in ./raconvert
> making in ./radark
> making in ./radump
> making in ./raevent
> making in ./rafilter
> making in ./ragraph
> making in ./ragrep
> making in ./rahisto
> making in ./rahosts
> making in ./ralabel
> making in ./rapath
> making in ./rapolicy
> making in ./raports
> making in ./rarpwatch
> making in ./raservices
> making in ./rastream
> making in ./rastrip
> making in ./ratop
> making in ./ratimerange
> making in ./ratemplate
> making in ./ramysql
> gcc -O3 -I. -I../../include -I../../common -I/usr/local/include
> -I/usr/local/include/mysql -DHAVE_CONFIG_H -c ./rasqlinsert.c
> ./rasqlinsert.c: In function 'argus_command_string':
> ./rasqlinsert.c:7034: error: incompatible type for argument 1 of
> 'ArgusCheckTimeFormat'
> *** Error code 1
> 
> Stop in /tmp/argus-clients-3.0.5.36/examples/ramysql.
> *** Error code 1
> 
> Stop in /tmp/argus-clients-3.0.5.36/examples.
> *** Error code 1
> 
> Stop in /tmp/argus-clients-3.0.5.36.
> 
> 
> 
>> 
>> Carter 
>> 
>> 
>> 
>> On Mar 16, 2012, at 10:01 AM, Carter Bullard wrote:
>> 
>>> Hey Mike,
>>> Thanks. !!!!  I'm off line but will look at this today.
>>> Carter
>>> 
>>> 
>>> 
>>> On Mar 15, 2012, at 4:41 PM, mike tancsa <mike at sentex.ca
>>> <mailto:mike at sentex.ca>> wrote:
>>> 
>>>> Hi,
>>>>  I installed the latest argus and the latest argus clients just now and
>>>> noticed ipv6 is not displayed properly, or at least the default
>>>> behaviour is different.
>>>> 
>>>> eg
>>>> 
>>>> Ra Version 3.0.5.35
>>>> ra -nr /var/log/argus/argus.log -L0 -N 5 - ipv6
>>>> StartTime      Flgs  Proto            SrcAddr  Sport   Dir
>>>> DstAddr  Dport  TotPkts   TotBytes State
>>>> 16:30:59.505899  *           udp        0.0.128.254.62082     ->
>>>>   0.0.2.255.1900          2        424   INT
>>>> 16:31:00.364806  e        ipv6-*       224.243.7.38.135      <->
>>>> 224.243.7.38.0             2        164   NNS
>>>> 16:31:00.699194  e           udp       224.243.7.38.63992    <->
>>>> 224.243.7.38.53            2        424   CON
>>>> 16:31:00.699222  e           udp       224.243.7.38.52021    <->
>>>> 224.243.7.38.53            2        349   CON
>>>> 16:31:00.704428  e           udp       224.243.7.38.53108    <->
>>>> 224.243.7.38.53            2        247   CON
>>>> 
>>>> 
>>>> vs taking the same argus file and trying on
>>>> Ra Version 3.0.5.19
>>>> ra -nr argus.log -N5 -L0 - ipv6
>>>>       StartTime      Flgs  Proto            SrcAddr  Sport   Dir
>>>>     DstAddr  Dport  TotPkts   TotBytes State
>>>> 03-15 16:30:59.505  *           udp fe80::25a0:e71e:d*.62082     ->
>>>>     ff02::c.1900          2        424   INT
>>>> 03-15 16:31:00.364  e        ipv6-*   2607:f3e0:0:3::1.135      <->
>>>> 2607:f3e0:0:3::18.0             2        164   NNS
>>>> 03-15 16:31:00.699  e           udp 2607:f3e0:0:4:f02*.63992    <->
>>>> 2607:f3e0:80:80::3.53            2        424   CON
>>>> 03-15 16:31:00.699  e           udp 2607:f3e0:0:4:f02*.52021    <->
>>>> 2607:f3e0:80:80::3.53            2        349   CON
>>>> 03-15 16:31:00.704  e           udp 2607:f3e0:0:4:f02*.53108    <->
>>>> 2607:f3e0:80:80::3.53            2        247   CON
>>>> 
>>>> 
>>>>  ---Mike
>> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120319/7eb873e1/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4367 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120319/7eb873e1/attachment.bin>


More information about the argus mailing list