Why sas das feature in rasqlinsert doesnot work?
Carter Bullard
carter at qosient.com
Tue Jul 23 08:33:24 EDT 2013
what are the contents of your ralabel.conf file, and what addresses are reporting 0?
simply stating that something is not working is very impolite.
Carter
On Jul 23, 2013, at 8:28 AM, Rahimeh Khodadadi <rahimeh.khodadadi at gmail.com> wrote:
> I solve the problem by this command, but still the value of sas, dasare zero?????
>
> argus -r pcaped.pcap -F /dev/null -w - | ralabel -f ralabel.conf -r - -w - -s +sas +das | rasqlinsert -r - -w mysql://root@localhost/argus/a -s stime ltime dur srcid flgs proto saddr sport dir daddr dport pkts bytes state spkts dpkts sbytes dbytes das sas
>
>
>
>
>
> On Tue, Jul 23, 2013 at 10:59 AM, Mike Iglesias <iglesias at uci.edu> wrote:
> On 07/22/2013 10:54 PM, Rahimeh Khodadadi wrote:
> > Thank you very much indeed Matt, but when I run the command gives such a erorr:
>
> If you're not using the latest code that Carter put up today, try that and see
> if it fixes this error. http://qosient.com/argus/dev/
>
>
> --
> Mike Iglesias Email: iglesias at uci.edu
> University of California, Irvine phone: 949-824-6926
> Office of Information Technology FAX: 949-824-2270
>
>
>
>
> --
> With Best Regards
> Rahimeh Khodadadi
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130723/9a8e3752/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130723/9a8e3752/attachment.bin>
More information about the argus
mailing list