ICMP Overloading Argus
Eric
eric-list-argus at catastrophe.net
Wed Aug 20 19:42:15 EDT 2003
On Wed, 2003-08-20 at 15:57:08 -0400, Carter Bullard proclaimed...
> So you should look in /var/log/messages to see if argus
> is writing anything to syslog. You will probably want to
> increase some constants in the code, but lets see if
> argus was saying anything before it closed.
Here's what pops up on my terminal when argus dies.
When argus dies from the overload, this is what we see...
argus[45470]: ArgusWriteOutSocket(0x8160000) Queue Count 50001
argus[45470]: ArgusWriteOutSocket(0x8160000) Queue Count 172722
argus[45470]: ArgusWriteOutSocket(0x8160000) Queue Exceeded Maximum Limit
argus[45470]: ArgusHandleData: ArgusWriteOutSocket failed Resource
temporarily unavailable
argus[45470]: ArgusHandleData: Terminating process 45471
More information about the argus
mailing list