argusarchive.

Scott A. McIntyre scott at xs4all.nl
Wed Oct 31 15:06:59 EST 2001


> Hey Scott,
>    This is not a good thing.  I have not had this
> happen.  So a few questions.  What system, what is the
> approximate record load, and how often are you running
> argusarchive.  Any corefiles laying around?  Did this
> just start, or has it been going on for a while?
> 

This is a new behaviour, however, it's also a new system, which no doubt
confuses things more.  Debian is the OS, some other stats:

gcc version 2.95.4 20011006
argus 2.0.3 (but just upgraded to 2.0.4)
argusarchive runs hourly.
No core files

Loading information:

racount    records       total_pkts         src_pkts         dst_pkts total_bytes        src_bytes        dst_bytes
    sum    7492124        201363675        119306845         82056830 121512216040      56550949602      64961266438

That's for an hour when it did rotate correctly.  For one that did not:

racount    records       total_pkts         src_pkts         dst_pkts total_bytes        src_bytes        dst_bytes
    sum    9087465        217167747        132217881         84949866 121941656909      56882605415      65059051494

Not a huge difference..

Scott



More information about the argus mailing list