Using tcpdump input

[Andrew Pollock]

On Mon, Mar 31, 2003 at 10:26:05PM -0500, Carter Bullard wrote:
> More than likely, argus is opening whatever
> interface twice.  This is not impossible,
> so the solution will be in understanding how argus
> is being called and the contents of your argus.conf
> file.  One quick approach is to run argus with
> the -X option as the first option on the command
> line.  If this resolves the problem the it will
> be straight forward.

Now we're making some progress. I get identical results.
Soooo.... How come Argus under normal operations is opening the interface 
twice?

I've got eth1 in the /etc/argus.conf, and argus is invoked with a -F 
/etc/argus.conf and not with a -i

Andrew