new argus-clients-3.0.7.28 on the server

[Carter Bullard]

All should be good, regarding sco/dco and saddr/daddr swapping, at least that is the desire ;O)
If you run with -D2 or -D3, you should see the sql statements that rasqlinsert() would  be
trying to generate.

I was working on a problem where the process that generates the statements terminates
without processing all the records on the queue, you may be running into that.
Run with -D3, that should show if there is thread termination without writing anything.

Carter

On May 19, 2014, at 10:01 PM, David Edelman <dedelman at iname.com> wrote:

> The ratop problem seems to be fixed. I'm still checking how sco and dco are
> handles when matrix is used in an aggregation. I still have a problem with
> rasqlinsert with the attached file. It seems to create the appropriate
> tables, but they are all empty.
> 
> rasqlinsert -M time 1d -M cache -r 5-161-164-145.argus.gz  -w
> mysql://argus@localhost/argus/xtest_%Y_%m_%d -m srcid matrix proto -s ltime
> dur srcid saddr daddr proto bytes sco dco 
> 
> It's no better when I run it without -M cache
> 
> --Dave
> 
> -----Original Message-----
> From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu
> [mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On
> Behalf Of Carter Bullard
> Sent: Sunday, May 18, 2014 9:03 PM
> To: Argus
> Subject: [ARGUS] new argus-clients-3.0.7.28 on the server
> 
> Gentle people,
> This new version is another step closer to release.
> Fixes for ratop() seg fault, and various memory fixes.
> Fixes for aggregators and matrix aggregation, especially
> mysql table fetching of previously aggregated data.
> 
> This can be fetched at the normal places:
>   http://qosient.com/argus/dev/argus-client-latest.tar.gz
> 
> Thanks !!!
> Carter
> 
> On May 15, 2014, at 5:18 PM, Carter Bullard <carter at qosient.com> wrote:
> 
>> Gentle people,
>> new client software up loaded to fix the bugs found in 
>> racluster() aggregation when specifying idle and status
>> timers for specific matched rules.
>> 
>>  http://qosient.com/argus/dev/argus-clients-latest.tar.gz
>> 
>> Also, in the process, I found a bug in the Patricia tree
>> algorithms, which could affect rafilteraddr() and some
>> of the metadata programs.  If you are doing address based
>> labeling, you'll need to test out this new release.
>> 
>> Thanks !!!!!
>> Carter
> 
> <5-161-164-145.argus.gz>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140519/ff764962/attachment.bin>