[ARGUS] re-use fd

slif at bellsouth.net slif at bellsouth.net
Thu Jun 24 18:43:25 EDT 2004


I haven't studied the sources too closely, so please forgive
this broadly ignorant query.

I understand the server may use fstat() to tell if the argus.out file
was moved.   If there were a packet.out file moved as well,
what makes certain that a newly opened file re-uses the
exact same file descriptor that it previously used for
both argus.out and packet.out ?

How frequently is the "file exists" check made ?
Is the file opened, written, and closed at each update ?

Do the children of the parent 'argus' make sure that they
use different file descriptors than the parent 'argus' ?

Does ArgusClientProcess get restarted ?

Can a new remote connection be established to a running 'argus',
when a possibly existing remote connection "breaks" not cleanly ?

All the Best,
-Mike Slifcak





More information about the argus mailing list