strange records

[Chas DiFatta]

David,

I don't know if this will help but it may be two things.  I was pushing
about 30-40 Mb/sec
on Solarus full-dup 100base-T and had to do a few things to make it sing.

	- Installed a new version of libpcap, 0.4
	- changed all varables in my clients to accomidate 64 bit length (long
long).
        This was needed when I crossed over the 20 Mb/sec mark.  I.e.
pumping
	  lots of data for hours on end.

Sometimes when I had different versions of the argus server and it's clients
compiled
with different versions of libpcap the clock would get far off and
occasionaly the
data would get wacky.  I just made sure that all code was compiled from the
same
base libs.

I hope this helps.

	...Chas

> -----Original Message-----
> From: owner-argus at lists.andrew.cmu.edu
> [mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of David Brumley
> Sent: Tuesday, April 20, 1999 9:50 AM
> To: Carter Bullard
> Cc: argus at lists.andrew.cmu.edu
> Subject: strange records
>
>
> I forgot to mention, the clock is only adjusted at most a few seconds.
>
> On Tue, 20 Apr 1999, David Brumley wrote:
>
> > Hey carter,
> > I've noticed some weird records lately while writing an IDS
> around argus.
> > I'm running argus on Solaris 2.6 on a FDDI.
> >
> > We run AFS on the machine, so the clock is adjusted every so often.  I
> > don't know if this explains the whole skew, though.
> >       - startime: Wed 04/14 00:44:11
> >       - lasttime: Tue 04/13 19:41:20
>
> #+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#
> David Brumley - Stanford Computer Security - dbrumley at Stanford.EDU
> Phone: +1-650-723-2911    WWW: http://www.stanford.edu/~dbrumley
> Fax:   +1-650-725-9121    PGP: finger dbrumley-pgp at sunset.Stanford.EDU
> #+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#+--+#
>