ra loops, possibly linked to ragator
Peter Van Epp
vanepp at sfu.ca
Mon Feb 26 22:09:07 EST 2001
Assuming you are still on FreeBSD (and perhaps even if not) try beta.7.
There were a couple of sort bugs (0ed records) still present on FreeBSD in
beta.6 and they are all supposed to be gone in beta.7.
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
>
> Hi,
> I did try argusbugs and it appeared to work fine except for the
> fact that the machines where I do my argus testing are not set up to
> send mail to the outside world. SO I'm doing this the old way.
>
> Version beta 6.
>
> A week or so back I started running ragator on my hourly files (default
> options) and about this time I stopped getting any reports from my
> overnight slowscan detector (and I had my op). When I finally checked
> the machine I found 6 days worth of ra process still running all
> burning cpu.
>
> All were processing one of the first 3 files of the day. It is
> conceivable that this is related to an argus version issue (I changed
> version on the same day that I sarted using ragator) but I doubt it. I
> need to do more work to clarify this.
>
> Any idea how to track this one down? One idea that occurs to me is to
> binary search one of the offending files using time options to try and
> get a small file that will exhibit the symptoms. (assuming that it is a
> particular record that is causing the problem). I'll try and do that
> this afternoon.
>
> Russell Fulton, Computer and Network Security Officer
> The University of Auckland, New Zealand
>
>
More information about the argus
mailing list