Segfault if srcid is an integer

David Edelman dedelman at iname.com
Mon Aug 18 21:55:49 EDT 2014


Carter,
 
I don't know if you saw this but it would be nice to either change the
behavior or the documentation since you seem ready to finalize the 3.0.8
release.
 
--Dave
 
From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu
[mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On
Behalf Of David Edelman
Sent: Monday, July 28, 2014 10:14 AM
To: 'Carter Bullard'; Argus
Subject: [ARGUS] Segfault if srcid is an integer
 
I am using argus and argus-clients 3.0.8 the only option that I used to
create the clients is -with-libpcre.
I use argus to read a pcap file and produce an argus flow file. I set a
source ID by using  -e 1 on the argus command line. If I subsequently use ra
to read the created file everything seems to be fine unless I specify -s
+srcid.
In that case, the man record is printed correctly with 0.0.0.1 as the
sourceID  and then it segfaults.  A clue may be that  if I use an older
version (3.0.7.23) of the ra code the man record shows the srcid as 0.0.0.1
but the other records show it as 1 without any attempt to make it look like
a dotted decimal.
I'm not sure at what point the problem was introduced.
--Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140818/dd0a9872/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6283 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140818/dd0a9872/attachment.bin>


More information about the argus mailing list