rasort doesn't finish

Russ Harvey russ at cornucopia.ucr.edu
Wed May 30 12:20:46 EDT 2001


Hi,
I am not sure this is the correct list (there are confusing references
to argus, argus development, and argus-info in the documentation), I
apologize if it is not.

I am running argus-2.0.1 on FreeBSD 4.2 (dual 500MHz Compaq), and I have
implemented argus monitoring my border traffic. I used the support/Archive
script to archive my argus output files once an hour, but sometimes
rasort does not finish running on the raw output files and I must kill
them off manually. I let a couple run for 12 hours or so, but they still
did not finish.

In checking the archives there were references to loops in ra on FreeBSD
machines (and also implications that the problem had been fixed), as well
as discussions of rasort dumping core. My hourly raw argus data files
are about 150Mb each, as our traffic is about 10K packets/sec in and out
(~50Mbps out, ~25Mbps in)

Is there a way I can get rasort to complete, or should I just not run
any post-processing from the archiving cron script? If this is a looping
problem, how can I figure out what in my data is causing rasort to get
confused?

Thanks,
--russ



More information about the argus mailing list