Looks like a new bug in clients ...
Peter Van Epp
vanepp at sfu.ca
Fri Aug 17 15:42:06 EDT 2007
The latest clients.rc.48 seems to have broken log file switching
somehow. The archived log file looks to end early (this should have been the
noon switch):
07-08-17 11:40:58 e tcp 142.58.61.205.1971 -> 209.85.171.166.80 2 3 1034 1677 CON
07-08-17 11:43:12 eIs tcp 151.21.221.110.64696 -> 206.12.16.87.41417 2 0 134 0 REQ
07-08-17 11:43:12 e tcp 192.75.243.138.4645 -> 209.85.167.99.80 2 2 1125 443 CON
and it didn't actually create a new com_argus when it did the switch (which
it thinks it did at noon from the archive log):
+ gzip com_argus.2007.08.17.11.00.00.0
+ TIMESTAMP=2007.08.17.12.00.54
2007.08.17.12.00.54 compression completed
+ mv com_argus.2007.08.17.11.00.00.0.gz /archive/argus3/com_argus.archive/2007/08/17
2007.08.17.12.00.54 argusarchive exiting successfully
But an lsof of the ra task indicates no output file present ... Ah
illumination just struck as I was typing this. It is trying to use the
file that was moved and compressed instead of creating a new com_argus:
stat(/Volumes/Teradactyl/argus/argus/com_argus.2007.08.17.11.00.00.0): No such file or directory
this is now /Teradactyl/argus/argus/com_argus.2007.08.17.11.00.00.0.gz
the archived file, ra hasn't recognized it needs to recreate
/var/log/argus/com_argus for some reason and is trying to write to the moved
archive file.
This may be a threads issue, since a test just now caused the file
to be recreated correctly when I moved it. I'll recompile clients without
threads and see if that helps.
lsof | grep ra3
ra3 1388 vanepp cwd VDIR 14,10 2856 122 /Volumes/Teradactyl/argus/argus
ra3 1388 vanepp txt VREG 14,2 1289728 1159587 /usr/local/bin/ra3
ra3 1388 vanepp txt VREG 14,2 1797576 1315128 /usr/lib/dyld
ra3 1388 vanepp txt VREG 14,2 4402196 1636735 /usr/lib/libSystem.B.dylib
ra3 1388 vanepp 0r VCHR 3,2 0t0 127907460 /dev/null
ra3 1388 vanepp 1w VREG 14,10 649543026 50850 /Volumes/Teradactyl/argus/argus.logs/com_ra3.log
ra3 1388 vanepp 2w VREG 14,10 649543026 50850 /Volumes/Teradactyl/argus/argus.logs/com_ra3.log
ra3 1388 vanepp 3r PSXSHM 0x07c29104 4096 obj=0x07dd17f8
ra3 1388 vanepp 4u IPv4 0x0829ea94 0t0 TCP test4.ucs.sfu.ca:51828->hcids.ucs.sfu.ca:rmonitor (ESTABLISHED)
ra3 1388 vanepp 5u VREG stat(/Volumes/Teradactyl/argus/argus/com_argus.2007.08.17.11.00.00.0): No such file or directory
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list