Why sas das feature in rasqlinsert doesnot work?

Carter Bullard carter at qosient.com
Tue Jul 23 08:33:24 EDT 2013


what are the contents of your ralabel.conf file, and what addresses are reporting 0?
simply stating that something is not working is very impolite.

Carter 

On Jul 23, 2013, at 8:28 AM, Rahimeh Khodadadi <rahimeh.khodadadi at gmail.com> wrote:

> I solve the problem by this command, but still the value of  sas, dasare zero?????
> 
> argus -r pcaped.pcap  -F /dev/null  -w - | ralabel -f ralabel.conf -r - -w - -s  +sas +das | rasqlinsert -r - -w mysql://root@localhost/argus/a  -s  stime ltime dur srcid flgs proto saddr sport dir daddr dport pkts bytes  state spkts dpkts sbytes dbytes  das sas 
> 
> 
> 
> 
> 
> On Tue, Jul 23, 2013 at 10:59 AM, Mike Iglesias <iglesias at uci.edu> wrote:
> On 07/22/2013 10:54 PM, Rahimeh Khodadadi wrote:
> > Thank you very much indeed Matt, but when I run the command gives such a erorr:
> 
> If you're not using the latest code that Carter put up today, try that and see
> if it fixes this error.  http://qosient.com/argus/dev/
> 
> 
> --
> Mike Iglesias                          Email:       iglesias at uci.edu
> University of California, Irvine       phone:       949-824-6926
> Office of Information Technology       FAX:         949-824-2270
> 
> 
> 
> 
> -- 
> With Best Regards
> Rahimeh Khodadadi
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130723/9a8e3752/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130723/9a8e3752/attachment.bin>


More information about the argus mailing list