[ARGUS] "Broken" srcid due to commit 385eebb
Patrick Forsberg
fors at chalmers.se
Tue Sep 16 09:31:46 EDT 2025
Prior to commit 385eebb we could have
ARGUS_MONITOR_ID=`hostname`
in argus.conf and the resolved ip-adress of 'hostname' would be used as
srcid.
For some reason this commit introduced quoting the hostname prior to
parsing optarg with ArgusParseSourceID, thus treating it as a string
instead of a hostname. This could have been OK had it not been for the 4
character limit on strings used for ARGUS_MONITOR_ID which turns a FQDN
into something quite useless.
Say we have argus running on sensor1.example.com and sensor2.example.com
They will both use sens as their srcid which is not desirable.
I would very much prefer the old behavior with the ip-adress as the
srcid and could be content with having the FQDN as srcid.
I have posted issue #18 on github regarding this.
Kind regards,
Patrick Forsberg
Chalmers University of Technology
More information about the argus
mailing list