[flow-tools] Problems with nfilter and tag file

[Martin Hierling]

Hi,

am new and not subscribed, so please answer to my mailadr. also, thanks.

I have compiled 
flow-tools version 0.58: built by maf@faith on Wed May 15 22:27:42 EDT 2002

and get:

# flow-cat /home/flow/ | flow-nfilter -f /var/ft/cfg/filters -F test-time
flow-nfilter: ftfil_find_definition(): failed

# cat filters
filter-primitive test-time
  type time
  permit gt December 12, 2002 05:13:21

filter-primitive 888
  type ip-port
  permit https
  permit 80
  default deny


same example like in the manpage, strace shows that config file get parsed.

open("/var/ft/cfg/filters", O_RDONLY)   = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=256, ...}) = 0
read(3, "filter-primitive test-time\n  typ"..., 256) = 256
time(NULL)                              = 1025186151
open("/etc/localtime", O_RDONLY)        = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=837, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x40017000
read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10"..., 4096) =
837
close(4)                                = 0
munmap(0x40017000, 4096)                = 0
brk(0x812f000)                          = 0x812f000
brk(0x8134000)                          = 0x8134000
brk(0x8139000)                          = 0x8139000
close(3)                                = 0
munmap(0x40175000, 819200)              = 0
write(2, "flow-nfilter: ftfil_find_definit"..., 46flow-nfilter:
ftfil_find_definition(): failed
) = 46
_exit(1)                                = ?


So, have i overread something?
thanks for your help.

	gruss Martin

-- 
----------------------------------------------------------------
  (A)bort, (R)etry, (I)nfluence with large hammer?
----------------------------------------------------------------