ICMP Overloading Argus

Eric eric-list-argus at catastrophe.net
Wed Aug 20 19:42:15 EDT 2003


On Wed, 2003-08-20 at 15:57:08 -0400, Carter Bullard proclaimed...

> So you should look in /var/log/messages to see if argus
> is writing anything to syslog.  You will probably want to
> increase some constants in the code, but lets see if
> argus was saying anything before it closed.

Here's what pops up on my terminal when argus dies.

When argus dies from the overload, this is what we see...

argus[45470]: ArgusWriteOutSocket(0x8160000) Queue Count 50001
argus[45470]: ArgusWriteOutSocket(0x8160000) Queue Count 172722
argus[45470]: ArgusWriteOutSocket(0x8160000) Queue Exceeded Maximum Limit
argus[45470]: ArgusHandleData: ArgusWriteOutSocket failed Resource
               temporarily unavailable
argus[45470]: ArgusHandleData: Terminating process 45471




More information about the argus mailing list