rasqlinsert

[David Edelman]

Carter,
 
Is the change to rasqlinsert mentioned below on the site? 
 
--Dave
 
From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu
[mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On
Behalf Of Carter Bullard
Sent: Thursday, March 13, 2014 12:02 PM
To: CS Lee
Cc: Argus
Subject: Re: [ARGUS] rasqlinsert
 
Hey CS Lee,
Use "-D3" to get rasqlinsert() to print the actual sql
statement that its using.  That should give you the string
to try directly in the mysql interpreter to see what is
wrong.  Maybe very obvious.
 
Not seeing your specific problem here, although, now that
I'm testing, I do see a problem with 20 and 21 not flushing
all the data into the database.  I'll fix that now.if you can
send the format of the sql statement that is failing,
should be able to get that solved...
 
Carter
 
On Mar 13, 2014, at 5:01 AM, CS Lee <geek00l at gmail.com
<mailto:geek00l at gmail.com> > wrote:



hi Carter,
I'm trying to run rasqlinsert from the argus client version 3.0.7.21 -

argusc-3.0.7.21/bin/rasqlinsert -M drop -nr /argus_data/data.arg3 -m none -w
mysql://root@localhost/argusdb/tbl_argus_test -s srcid saddr sport daddr
dport proto
rasqlinsert[18078]: 15:27:17.155818 mysql_real_query error You have an error
in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near '(null)' at line 1


I don't seem to have this problem when I use 3.0.7.3 though. My mysql
version is 
mysql --version
mysql  Ver 14.14 Distrib 5.5.24, for debian-linux-gnu (x86_64) using
readline 6.2

-- 
Best Regards,

CS Lee<geek00L[at]gmail.com <http://gmail.com/> >

http://geek00l.blogspot.com <http://geek00l.blogspot.com/> 
http://defcraft.net <http://defcraft.net/>  
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140315/e5011fca/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6283 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140315/e5011fca/attachment.bin>