Segfault if srcid is an integer

Carter Bullard carter at qosient.com
Tue Aug 19 17:01:54 EDT 2014


Hey Dave,
Sorry, somehow I either didn’t see your earlier email, or it dropped
on the email floor.  Yes, I’m trying to be done !!!! But its a
never ending stream of issues.

OK, I can replicate the problem here, so I’m on it.

Carter

On Aug 18, 2014, at 9:55 PM, David Edelman <dedelman at iname.com> wrote:

> Carter,
>  
> I don’t know if you saw this but it would be nice to either change the behavior or the documentation since you seem ready to finalize the 3.0.8 release.
>  
> --Dave
>  
> From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu [mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On Behalf Of David Edelman
> Sent: Monday, July 28, 2014 10:14 AM
> To: 'Carter Bullard'; Argus
> Subject: [ARGUS] Segfault if srcid is an integer
>  
> I am using argus and argus-clients 3.0.8 the only option that I used to create the clients is –with-libpcre.
> 
> I use argus to read a pcap file and produce an argus flow file. I set a source ID by using  -e 1 on the argus command line. If I subsequently use ra to read the created file everything seems to be fine unless I specify –s +srcid.
> 
> In that case, the man record is printed correctly with 0.0.0.1 as the sourceID  and then it segfaults.  A clue may be that  if I use an older version (3.0.7.23) of the ra code the man record shows the srcid as 0.0.0.1 but the other records show it as 1 without any attempt to make it look like a dotted decimal.
> 
> I’m not sure at what point the problem was introduced.
> 
> --Dave
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140819/f13aea07/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140819/f13aea07/attachment.bin>


More information about the argus mailing list