argus.2.0.6.fixes.1 on OBSD 3.7
Carter Bullard
carter at qosient.com
Tue Aug 23 12:35:57 EDT 2005
Hey Guys,
If there is a machiine I can log into to take a look, I'd be happy to
do that.
Carter
eric wrote:
>On Tue, 2005-08-23 at 15:54:33 +1200, Russell Fulton proclaimed...
>
>
>
>>Now it keeps dying with memory problems:
>>
>>Aug 23 13:06:29 hihi argus_bpf[27318]: started
>>Aug 23 13:30:51 hihi argus_bpf[27318]: ArgusNewFlow() ArgusCalloc error
>>Cannot allocate memory. Aug 23 13:30:51 hihi argus_bpf[27682]:
>>client(/home/argus/data/current) done.
>>The box has 512MB real memory and a GB of swap. I'm running other linux
>>sensors on this network with less memory.
>>I remember Eric and Peter mentioning kernel memory being an issue with some
>>BSD systems but could not find the posts in the archive.
>>
>>
>
>Hi Russell!
>
>How often is your process dying off? Can you debug it (touch .devel .debug)
>in the root directory and build, then it in gdb. You can also run it under
>systrace(8) and see if that gives you information.
>
>Everything in obsd can be done in login.conf(5). No kernel compiling is
>needed. On our main sensor (about 300Mbps) we only use about 210MB of
>resident memory. Granted, we're using gargoyle, but the footprint of argus
>seems to only be about 30% larger.
>
>
>
More information about the argus
mailing list