a few questions

Carter Bullard carter at qosient.com
Thu May 31 09:16:30 EDT 2001


Hey Russell,
   I just found your problem.  You have to comment out the
last line of the example argus.conf.  Argus is trying to
find the file "", and is having problems.

So on line 279, just add a ^#.

#ARGUS_PACKET_CAPTURE_FILE=""


Sorry about that!

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com 


-----Original Message-----
From: owner-argus-info at lists.andrew.cmu.edu
[mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Russell
Fulton
Sent: Thursday, May 31, 2001 12:46 AM
To: argus-info at lists.andrew.cmu.edu
Subject: a few questions


Hi All,
	I'm setting up a new argus server and doing it all from scratch 
using 2.0.1 distribution.  In particular I am building new start up 
scripts and putting everything in 'config' files.

It is a debian linux system so the sample rc file does not work out of 
the box so I am hacking it.

Questions/observations:

Argus does not seem to create a pid file even though I ask for it in 
the config file,

when I start argus from the command line with -F I get the message:
rful011 at hihi:~$ argus_linux[2361]: : No such file or directory

It is finding and reading the config file (I got syntax errors before) 
and it creates the output file (as per config file) 
rful011 at hihi:~$ ls -l ~argus/data/current 
-rw-r--r--    1 root     argus           0 May 31 16:26 
/home/argus/data/current

before dying with the above error.

starting argus from the command line works fine: rful011 at hihi:~$ sudo
~argus/bin/argus_linux -d -i eth1 -w 
~argus/data/current
argus_linux[2368]: started

but still no pid file in /var/run

Puzzled

Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand



More information about the argus mailing list