multiple argus config files

[Carter Bullard]

Hey Russell,
   Because argus can support multiple output files,
it will support whatever number of output files that
are in the collective group of configuration files.

So its doing what its suppose to do.  Now, we have
the -X option for argus to ignore any configuration files
that it may have discovered, and use just the one on
the command line.

   Will the -X option solve your problem?

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


> -----Original Message-----
> From: Russell Fulton [mailto:R.FULTON at auckland.ac.nz] 
> Sent: Sunday, February 17, 2002 9:38 PM
> To: argus-list at lists.andrew.cmu.edu
> Subject: multiple argus config files
> 
> 
> Hi,
>    I'm not sure if this is a bug or a feature ;-)
> 
> I had been running argus and having it find a config file on 
> it's own. A few days ago I changed this to put an explicit -F 
> on the command line and at the same time I also changed the 
> name of the file argus was to write to.  I noticed that the 
> amount of data the backup process reported started to 
> steadily increase day by day and when I investigated I found 
> that there was a very large file in the logging directory 
> with the name that I had been using for the current log file. 
>  This file always had the same timestamp as the current log 
> file.  I checked that there was only the one argus parent 
> process running but noted that there seemed to be an extra 
> output process.
> 
> What I think is happening is that although I  am explicitly 
> supplying a config file on the command line argus is also 
> doing its own search for a config file and if it finds one it 
> then processes it and will log  to any files it finds in any 
> config file.
> 
> -- 
> Russell Fulton, Computer and Network Security Officer
> The University of Auckland,  New Zealand
> 
> 
>