racluster.conf problems

[Carter Bullard]

Hey Rafael,
The assignment of the stream's concept of time had been commented out.
Probably to debug something…..  If you edit your copy of ./common/argus_util.c,
to remove the block comment delimiters on lines 21920 and 21927, and
recompile, all should be much better.

Here is a patch:

diff -r argus-clients-3.0.7.10/common/argus_util.c clients/common/argus_util.c
21920d21919
< /*
21927d21925
< */
21928a21927
> 

When you do this, if something else break's, holler.  It shouldn't break anything
else, but you never know.  Programs that are sensitive to real time and stream
time, such as rastream(), rasplit(), rasqlinsert() and rabins() may be effected, but
all was well when I checked mine out.

Carter

On Jun 3, 2013, at 10:22 AM, Carter Bullard <carter at qosient.com> wrote:

> Hey Rafael,
> So I can reproduce the bug here, so I've broken it.  Should have a fix today.
> Carter
> 
> On Jun 3, 2013, at 9:07 AM, Carter Bullard <carter at qosient.com> wrote:
> 
>> Hey Rafael,
>> I've been working on some bugs in racluster, could be that I've broken it.
>> Let me see, and I'll get back at in a few !!!!
>> 
>> Carter
>> 
>> On Jun 3, 2013, at 8:49 AM, Rafael Barbosa <rrbarbosa at gmail.com> wrote:
>> 
>>> Hi Carter,
>>> 
>>> I am having problems using the racluster() the latest version (3.0.7.10). For some reason it seems not to be doing any aggregation if a pass a configuration file with the "-f" option.
>>> My test is very simple:
>>> 
>>> ra -L-1 -r flows.argus | wc -l                                                                                        3047296
>>> racluster -f ~/config/racluster.conf -L-1 -r flows.argus | wc
>>> 3047296
>>> 
>>> Now if I run the same command using the latest stable version (3.0.6):
>>> 
>>> racluster -f ~/config/racluster.conf -L-1 -r flows.argus | wc -l
>>> 238370
>>> 
>>> The contents of ~/config/racluster.conf:
>>> #Filter:every record, no record status output, record time out 5min
>>> filter="" status=0 idle=300
>>> 
>>> Is this a bug or am I missing something?
>>> 
>>> Rafael Barbosa
>>> http://wwwhome.cs.utwente.nl/~barbosarr
>> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130603/7a2d05b0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130603/7a2d05b0/attachment.bin>