argus.2.0.6.fixes.1 on OBSD 3.7

eric eric-list-argus at catastrophe.net
Fri Aug 26 10:44:28 EDT 2005


On Fri, 2005-08-26 at 10:30:37 -0400, Carter Bullard proclaimed...

>    I've got the modified argus_bpf running, and we'll see if it now  
> breaks.
> I've got a lot of memory debug support now in, and so we'll see if we've
> got someone deallocating incorrectly, or if we just have a lot of memory
> requirements for this probe.  You have a lot of scanning going on, and
> so you have a high average flow arrival rate (>20,000 simultaneous  
> flows),
> but that shouldn't cause you to go over 500MB of memory.

Why is it that some folks call it argus_bpf? I've only been seeing this for
abour 4 years now so I thougth I'd ask now :)



More information about the argus mailing list