Argus CLI requesting to write pid file

[carter at qosient.com]

Hey Robin,
There is another suggestion that I forgot to mention.  On most systems, I have the /etc/argus.conf file ownership as root, and I set the permissions to 400l, so users can't read the file.  This means that in your example, you won't collide with the system argus, because you won't read the system /etc/argus.conf file.  Argus supports a ARGUSPATH environment variable, so you can have, as an example, a private argus.conf in your home directory if you do this a lot.

Carter.

 

Carter Bullard
QoSient LLC
150 E. 57th Street Suite 12D
New York, New York 10022
+1 212 588-9133 Phone
+1 212 588-9134 Fax  

-----Original Message-----
From: Robin Gruyters <r.gruyters at yirdis.nl>
Date: Wed, 06 Dec 2006 11:34:52 
To:Argus <argus-info at lists.andrew.cmu.edu>
Subject: [ARGUS] Argus CLI requesting to write pid file

Hi ya,

On one of our sensors we have a Argus process running in daemon mode.  
When I try to run another process with no purposes to run it in daemon  
mode (just to create a temp. argus file from a tcpdump logfile), it  
won't start.

$ argus -X -w /tmp/test.argus -r tcpdump.log.1165273201
argus[4189]: daemon cannot create new pid file
$

Altough I use the option -X (=Clean existing argus configuration), it  
still won't start.

Is it possible to include the option (or maybe as default) not to  
write a pid file when not starting in daemon mode?

Regards,

Robin Gruyters
Network and Security Engineer
Yirdis B.V.
I: http://yirdis.com
P: +31 (0)36 5300394
F: +31 (0)36 5489119