argus and snort ?
    Russell Fulton 
    r.fulton at auckland.ac.nz
       
    Mon Sep 11 01:28:12 EDT 2000
    
    
  
Hi All,
	I have just noticed that one of my argus recorders seems to be 
missing packets, the irony is that the one loosing data is a 500MHz 
machine and the other is 166MHz.
When I kill the argus suspect argus process it reports:
263828758 packets recv'd by filter
0 packets dropped by kernel
I have recently started running snort on the same machine (a FreeBSD 
4.1 box) and I am wondering if there is some interaction that means 
that argus is not getting some of the packets.
Any ideas?
Cheers, Russell.
    
    
More information about the argus
mailing list