Additional rasqlinsert information
Dave Edelman
dedelman at iname.com
Tue May 14 09:57:30 EDT 2013
Carter,
Thanks, this is looking much better. I did have to drop the tables that had
the problem data and then everything started to work well.
--Dave
> -----Original Message-----
> From: Carter Bullard [mailto:carter at qosient.com]
> Sent: Tuesday, May 14, 2013 7:58 AM
> To: Dave Edelman; Jesse Bowling
> Cc: Argus
> Subject: Re: [ARGUS] Additional rasqlinsert information
>
> Hey Dave,
> I believe that the fixes in argus-clients-3.0.7.9, which I'm putting up
right
> now,
> address this problem. The issue is that I turned FLOW_CORRECTION on by
> default, and the aggregation routines, including rasqlinsert(), were doing
> flow
> direction correction, even when the aggregation model was not the default
> 5-tuple flow definition. This would generate unexpected CIDR addresses,
> 0.0.0.0 entries, etc, when the proto field was a part of the model.
>
> This release also fixes a number of issues with using floating point in
the
> filter, to support the new " abr " metrics.
>
> Grab these clients, and please give it a try.
>
> http://qosient.com/argus/dev/argus-clients-3.0.7.9.tar.gz
>
> Carter
>
>
> On May 14, 2013, at 7:08 AM, "Dave Edelman" <dedelman at iname.com>
> wrote:
>
> > Carter,
> >
> > It looks like changing the CIDR notation parameter may be masking the
> > problem rather than fixing it. I found a bunch of MySQL error messages
in
> > the system message log so I restarted rasqlinsert with -D 3.
> >
> > For some reason redirection of STDERR prevented the program from
> running so
> > I just used cut and paste into a file.
> >
> >
> >
> > --Dave
> > <rasqlinsert.txt>
More information about the argus
mailing list