Finding big files using 'filters' and 'files'

[Hugo Gayosso]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have tried all sorts of combinations to try to find files bigger
than 20mb in a certain directory, but it does not work, it doesn't
find anything.

files:
   /tmp  filter=Size20Mb action=alert  r=inf

filters:

   { Size20Mb
      FromSize:  "1"
      ToSize:    "20mb"
      Result:    "Size"
   }


Here is the sample I am using, and it does not report ANY of the files
in there:

# ll /tmp/pru
total 39284
- -rw-r--r--    1 root     root     30167040 Feb 28 14:22 hosts2.log
- -rw-r--r--    1 root     root          194 Feb 28 14:22 hosts3.log
- -rw-r--r--    1 root     root            0 Feb 28 14:23 hosts4.log
- -rw-r--r--    1 qztf7k   users    10055680 Feb 21 15:14 hosts.log


If I write a filter that looks for the Owner, it works as expected:

files:
   /tmp  filter=owner-qztf7k action=alert  r=inf

filters:
   { owner-qztf7k
      Owner:     "qztf7k"
      Result:    "Owner"
   }

So I am thinking this is a bug, but I am not sure, anybody knows
something about this?

Greetings,
- -- 
Hugo Gayosso
Support the Free Software Movement!
GNU Project <http://www.gnu.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+X73ix2JZtTN6co8RAgZlAKCymghdK5L4QYQ2r8xDidSxLyKIJQCdFxoP
Y5q1MymU2MzZL+9Isuku48E=
=e+pN
-----END PGP SIGNATURE-----