Segfault if srcid is an integer

David Edelman dedelman at iname.com
Mon Jul 28 10:14:24 EDT 2014


I am using argus and argus-clients 3.0.8 the only option that I used to
create the clients is -with-libpcre.

I use argus to read a pcap file and produce an argus flow file. I set a
source ID by using  -e 1 on the argus command line. If I subsequently use ra
to read the created file everything seems to be fine unless I specify -s
+srcid.

In that case, the man record is printed correctly with 0.0.0.1 as the
sourceID  and then it segfaults.  A clue may be that  if I use an older
version (3.0.7.23) of the ra code the man record shows the srcid as 0.0.0.1
but the other records show it as 1 without any attempt to make it look like
a dotted decimal.

I'm not sure at what point the problem was introduced.

--Dave

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140728/d9d77cb0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6283 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140728/d9d77cb0/attachment.bin>


More information about the argus mailing list