argus-2.0.2's eminent release

Gentle people,
   I'm going to release argus-2.0.2 next week.  Has anyone
found any problems, issues, gottchas?

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter <at> qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com

ramon question

Hi Carter!
What is ramon's output with TopN?  How does it decide what to use as a
criteria (pkts vs. bytes)?

I'm doing:
./ramon -M TopN -nr $HOME/tmp/testverysmall.010806

thanks,
david

RE: ramon question

Hey David,
   Its bytes, but its easy for it to be any
value.  Just pipe the output to rasort, and
you'll get answer you were looking for.  Just
put the -N on the rasort, instead of the ramon.

So if you wanted to sort based on packets:
   ramon -M TopN -w - | rasort -s packets -N 20

In this case the rasort and ramon should be from
the argus-2.0.2.beta releases, not the
argus-client.alpha releases.

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter <at> qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com

> -----Original Message-----
> From: owner-argus-info <at> lists.andrew.cmu.edu 
> [mailto:owner-argus-info <at> lists.andrew.cmu.edu] On Behalf Of 
> David J Brumley
> Sent: Friday, August 10, 2001 9:12 PM

argus-2.0.2 is available from the dev download area

Gentle people,
   As a preview, argus-2.0.2 is now ready.  No
major surprises, bug fixes, knob tweaking and some
minor feature changes, as well as SASL compilation
support in ./configure.

   I've updated the primary documentation for
all the changes, but, I could have missed something,
so if you by any chance find something missing,
or out of place, or whatever, please send mail!!!

   I'm planning on officially releasing argus-2.0.2
on Friday.

Hope all is well!!!

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter <at> qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com

RE: argus-2.0.2 is available from the dev download area

Oooops,  didn't send the links.
ftp://qosient.com/dev/argus-2.0/argus-2.0.2.tar.gz
ftp://qosient.com/dev/argus-2.0/argus-2.0.2.tar.gz.asc
ftp://qosient.com/dev/argus-2.0/argus-2.0-2.i386.rpm
ftp://qosient.com/dev/argus-2.0/argus-2.0-2.src.rpm

Carter

> -----Original Message-----
> From: owner-argus-info <at> lists.andrew.cmu.edu 
> [mailto:owner-argus-info <at> lists.andrew.cmu.edu] On Behalf Of 
> Carter Bullard
> Sent: Tuesday, August 14, 2001 8:38 AM
> To: Argus
> Subject: argus-2.0.2 is available from the dev download area
> 
> 
> Gentle people,
>    As a preview, argus-2.0.2 is now ready.  No
> major surprises, bug fixes, knob tweaking and some
> minor feature changes, as well as SASL compilation
> support in ./configure.
> 
>    I've updated the primary documentation for
> all the changes, but, I could have missed something,
> so if you by any chance find something missing,
> or out of place, or whatever, please send mail!!!
> 
>    I'm planning on officially releasing argus-2.0.2
> on Friday.

[argus-announce] argus-2.0.2 released

Gentle people,
   Argus-2.0.2 is now released.  It should be considered to be stable on
Solaris, RedHat Linux, FreeBSD, NetBSD and OpenBSD.

   Argus-2.0.2 fixes a large number of bugs, in both the server and
client code, and so it should be considered a significant release.
Please see the ./ChangeLog for specific modifications to the code.

   Argus-2.0.2 has ./configure support to link argus with the SASL
libraries, in order to provide strong authentication and confidentiality
for remote access to argus data.  See the ./INSTALL file for
instructions on turning this valuable feature on. While argus-2.0.2
clients do compile under Cygwin, the SASL support is not there.

   Please do upgrade to argus-2.0.2.  As always, if you have any
comments/suggestions/opinions/reactions/whatever, please don't hesitate
to send mail!!!

Thanks!!!

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter <at> qosient.com
Phone +1 212 588-9133

RE: argus-2.0.2 is available from the dev download area

Hey Peter,
   Well "better late than never"?  2.0.2 is now released,
so are these problems happening to /pub/argus/argus-2.0.2?

   It would probably be better if we modified the ./configure
file so that if its OpenBSD, we don't use the
../include/linux-include directory.  Could you check out
how it behaves if you take the "-I ../include/linux-include"
out of the Makefiles?

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter <at> qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com

> -----Original Message-----
> From: Peter Van Epp [mailto:vanepp <at> sfu.ca] 
> Sent: Friday, August 24, 2001 6:44 PM
> To: carter <at> qosient.com
> Subject: Re: argus-2.0.2 is available from the dev download area
> 
> 
> 	There are some advantages to being away from email  

Re: argus-2.0.2 is available from the dev download area

> 
> Hey Peter,
>    Well "better late than never"?  2.0.2 is now released,
> so are these problems happening to /pub/argus/argus-2.0.2?

	Yep.

> 
>    It would probably be better if we modified the ./configure
> file so that if its OpenBSD, we don't use the
> ../include/linux-include directory.  Could you check out
> how it behaves if you take the "-I ../include/linux-include"
> out of the Makefiles?
> 
> 
> Carter
>

	Done. As well .devel is defined in the tar file which it probably 
shouldn't be. The following patch file compiles on OpenBSD 2.8 and FreeBSD 4.3
(and I would guess on NetBSD but I need to reboot the OpenBSD machine at work
to bring up NetBSD to test it). Configure has been modified to remove the
linux-include and all the .h file conflicts have been resolved either by 
manually only including the include once or commenting it out for OpenBSD 
(which likely means it could be removed because it is included somewhere else
although I didn't do that). It is against the 

/pub/argus/argus-2.0.2/argus-2.0.2.tar.gz 

file.

Re: argus-2.0.2 is available from the dev download area

On Monday 27 August 2001 04:56, Peter Van Epp wrote:

> 	Done. As well .devel is defined in the tar file which it probably
> shouldn't be. The following patch file compiles on OpenBSD 2.8 and FreeBSD
> 4.3 (and I would guess on NetBSD but I need to reboot the OpenBSD machine
> at work to bring up NetBSD to test it). Configure has been modified to
> remove the linux-include and all the .h file conflicts have been resolved
> either by manually only including the include once or commenting it out for
> OpenBSD (which likely means it could be removed because it is included
> somewhere else although I didn't do that). It is against the
> /pub/argus/argus-2.0.2/argus-2.0.2.tar.gz

I just wanted to report that the patch works very well also on OpenBSD 2.9.
Now it compiles without any .h tweaking and Argus still runs just fine as 
usual. Great!

Regards,
Andreas Östling

I am interested in your soucre code of the TCP-state machine