racluster.conf problems

[Carter Bullard]

Hey Rafael,
I'm going to put up argus-clients-3.0.7.11 today, which has some
fixes specific to this problem.  It does the right thing on any
of my data sources, here.

Still have some gotcha's with new threaded code base, but all
should work well.

I'll send email today when I get it up.

Carter



On Jul 3, 2013, at 6:57 AM, Rafael Barbosa <rrbarbosa at gmail.com> wrote:

> Hi Carter,
> 
> I am still seeing some flows which are not being aggregated when they should. Maybe there is still something commented out?
> 
> Thanks,
> Rafael
> 
> 
> Rafael Barbosa
> http://wwwhome.cs.utwente.nl/~barbosarr
> 
> 
> On Mon, Jun 3, 2013 at 5:05 PM, Carter Bullard <carter at qosient.com> wrote:
> Hey Rafael,
> The assignment of the stream's concept of time had been commented out.
> Probably to debug something…..  If you edit your copy of ./common/argus_util.c,
> to remove the block comment delimiters on lines 21920 and 21927, and
> recompile, all should be much better.
> 
> Here is a patch:
> 
> diff -r argus-clients-3.0.7.10/common/argus_util.c clients/common/argus_util.c
> 21920d21919
> < /*
> 21927d21925
> < */
> 21928a21927
> > 
> 
> When you do this, if something else break's, holler.  It shouldn't break anything
> else, but you never know.  Programs that are sensitive to real time and stream
> time, such as rastream(), rasplit(), rasqlinsert() and rabins() may be effected, but
> all was well when I checked mine out.
> 
> Carter
> 
> On Jun 3, 2013, at 10:22 AM, Carter Bullard <carter at qosient.com> wrote:
> 
>> Hey Rafael,
>> So I can reproduce the bug here, so I've broken it.  Should have a fix today.
>> Carter
>> 
>> On Jun 3, 2013, at 9:07 AM, Carter Bullard <carter at qosient.com> wrote:
>> 
>>> Hey Rafael,
>>> I've been working on some bugs in racluster, could be that I've broken it.
>>> Let me see, and I'll get back at in a few !!!!
>>> 
>>> Carter
>>> 
>>> On Jun 3, 2013, at 8:49 AM, Rafael Barbosa <rrbarbosa at gmail.com> wrote:
>>> 
>>>> Hi Carter,
>>>> 
>>>> I am having problems using the racluster() the latest version (3.0.7.10). For some reason it seems not to be doing any aggregation if a pass a configuration file with the "-f" option.
>>>> My test is very simple:
>>>> 
>>>> ra -L-1 -r flows.argus | wc -l                                                                                        3047296
>>>> racluster -f ~/config/racluster.conf -L-1 -r flows.argus | wc
>>>> 3047296
>>>> 
>>>> Now if I run the same command using the latest stable version (3.0.6):
>>>> 
>>>> racluster -f ~/config/racluster.conf -L-1 -r flows.argus | wc -l
>>>> 238370
>>>> 
>>>> The contents of ~/config/racluster.conf:
>>>> #Filter:every record, no record status output, record time out 5min
>>>> filter="" status=0 idle=300
>>>> 
>>>> Is this a bug or am I missing something?
>>>> 
>>>> Rafael Barbosa
>>>> http://wwwhome.cs.utwente.nl/~barbosarr
>>> 
>> 
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130703/0a953040/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130703/0a953040/attachment.bin>