Looks like a new bug in argus

[Carter Bullard]

Timo,
You don't have the latest files.  Right now, argus is in flux, as  
we've got a persistent
bug that we're trying to wring out.  So, the files on the server are  
changing
possibly hourly.  Please get the latest copies of the program, (as of  
5:00 pm EST)
and you should not have any problems (at least that look like this).

Carter


On Aug 19, 2007, at 12:09 PM, Timo Sühl wrote:

> Argh ... just another compile error:
>
> ### Making in /usr/local/src/argus-3.0.0/argus
> make[1]: Entering directory `/usr/local/src/argus-3.0.0/argus'
> gcc -O3 -I.  -I./../include  -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME= 
> \"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" - 
> DPACKAGE_BUGREPORT=\"\" -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 - 
> DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 - 
> DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_FCNTL_H=1 -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 - 
> DHAVE_VFPRINTF=1 -DHAVE_STRCASECMP=1 -DHAVE_STRDUP=1 - 
> DHAVE_STRFTIME=1 -DHAVE_SETLINEBUF=1 -DHAVE_ALARM=1 - 
> DHAVE_STRERROR=1 -DHAVE_STRTOF=1 -DHAVE_SYS_BITYPES_H=1 - 
> DHAVE_INTTYPES_H=1 -DHAVE_VSNPRINTF=1 -DHAVE_SNPRINTF=1 - 
> DHAVE_ETHER_HOSTTON=1 -DHAVE_NETINET_ETHER_H=1 - 
> DNETINET_ETHER_H_DECLARES_ETHER_HOSTTON= - 
> DHAVE_DECL_ETHER_HOSTTON=1 -D_FILE_OFFSET_BITS=64 - 
> DHAVE_PCAP_LIST_DATALINKS=1 -DHAVE_PCAP_SET_DATALINK=1 - 
> DHAVE_PCAP_DATALINK_NAME_TO_VAL=1 - 
> DHAVE_PCAP_DATALINK_VAL_TO_DESCRIPTION=1 -DHAVE_PCAP_BREAKLOOP=1 - 
> DHAVE_PCAP_DUMP_FTELL=1 -DHAVE_TCP_WRAPPER=1 -DCONFIG_X86_BSWAP=1 - 
> DSTDC_HEADERS=1  -DARGUS_SYSLOG=1 -c argus.c
> gcc -O3 -I.  -I./../include  -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME= 
> \"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" - 
> DPACKAGE_BUGREPORT=\"\" -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 - 
> DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_INTTYPES_H=1 - 
> DHAVE_STDINT_H=1 -DHAVE_UNISTD_H=1 -DHAVE_STRING_H=1 - 
> DHAVE_FCNTL_H=1 -DHAVE_SYS_FILE_H=1 -DHAVE_SYSLOG_H=1 - 
> DHAVE_VFPRINTF=1 -DHAVE_STRCASECMP=1 -DHAVE_STRDUP=1 - 
> DHAVE_STRFTIME=1 -DHAVE_SETLINEBUF=1 -DHAVE_ALARM=1 - 
> DHAVE_STRERROR=1 -DHAVE_STRTOF=1 -DHAVE_SYS_BITYPES_H=1 - 
> DHAVE_INTTYPES_H=1 -DHAVE_VSNPRINTF=1 -DHAVE_SNPRINTF=1 - 
> DHAVE_ETHER_HOSTTON=1 -DHAVE_NETINET_ETHER_H=1 - 
> DNETINET_ETHER_H_DECLARES_ETHER_HOSTTON= - 
> DHAVE_DECL_ETHER_HOSTTON=1 -D_FILE_OFFSET_BITS=64 - 
> DHAVE_PCAP_LIST_DATALINKS=1 -DHAVE_PCAP_SET_DATALINK=1 - 
> DHAVE_PCAP_DATALINK_NAME_TO_VAL=1 - 
> DHAVE_PCAP_DATALINK_VAL_TO_DESCRIPTION=1 -DHAVE_PCAP_BREAKLOOP=1 - 
> DHAVE_PCAP_DUMP_FTELL=1 -DHAVE_TCP_WRAPPER=1 -DCONFIG_X86_BSWAP=1 - 
> DSTDC_HEADERS=1  -DARGUS_SYSLOG=1 -c ArgusModeler.c
> ArgusModeler.c: In function âArgusProcessQueueTimeoutâ:
> ArgusModeler.c:290: error: âstruct ArgusQueueStructâ has no member  
> named âlockâ
> ArgusModeler.c:355: error: âstruct ArgusQueueStructâ has no member  
> named âlockâ
> make[1]: *** [ArgusModeler.o] Error 1
> make[1]: Leaving directory `/usr/local/src/argus-3.0.0/argus'
> ### Done with /usr/local/src/argus-3.0.0/argus
>
>
> Timo
>
> Carter Bullard schrieb:
>> Hey Timo,
>> Remove the .threads file in the root directory of argus and then  
>> start over.
>> (rm .threads; make clobber; ./configure; make).  I'll remove it  
>> from the
>> distribution later today, when I get back to the office.
>> Carter
>> Timo Sühl wrote:
>>> Hi Peter,
>>>
>>> i think the memory leak also affects me. It eats more and more  
>>> memory and then begins to swap:
>>>
>>> cis:~# ps aux | grep argus
>>> root      4899  0.6 94.8 1434984 983168 ?      Dsl  Aug18   4:26 / 
>>> usr/local/sbin/argus -de cis -w /var/log/argus/argus.out
>>>
>>> As i'm not familar with programming ... can you tell me how to  
>>> disable the threads? Is it "-DARGUS_THREADS=X" in its Makefile?
>>>
>>> Timo
>>>
>>> Peter Van Epp schrieb:
>>>>     Another data point: setting the debug level down (til where  
>>>> it becomes
>>>> active) in common/argus_util.c breaks the argus:
>>>>
>>>> *** common/argus_util.c.orig    2007-08-18 16:37:06.000000000 -0700
>>>> --- common/argus_util.c.new     2007-08-18 18:16:08.000000000 -0700
>>>> ***************
>>>>
>>>> (this one works OK)
>>>> *** 1221,1227 ****
>>>>   #endif
>>>>      }
>>>>   #ifdef ARGUSDEBUG
>>>> !    ArgusDebug (6, "ArgusMalloc (%d) returning 0x%x\n", bytes,  
>>>> retn);
>>>>   #endif
>>>>      return (retn);
>>>>   }
>>>> --- 1221,1227 ----
>>>>   #endif
>>>>      }
>>>>   #ifdef ARGUSDEBUG
>>>> !    ArgusDebug (1, "ArgusMalloc (%d) returning 0x%x\n", bytes,  
>>>> retn);
>>>>   #endif
>>>>      return (retn);
>>>>   }
>>>>
>>>> (but doing this one with threads enabled hangs)
>>>>
>>>> ***************
>>>> *** 1285,1291 ****
>>>>      }
>>>>
>>>>   #ifdef ARGUSDEBUG
>>>> !    ArgusDebug (6, "ArgusCalloc (%d, %d) returning 0x%x\n",  
>>>> nitems, bytes, retn);
>>>>   #endif
>>>>      return (retn);
>>>>   }
>>>> --- 1285,1291 ----
>>>>      }
>>>>
>>>>   #ifdef ARGUSDEBUG
>>>> !    ArgusDebug (1, "ArgusCalloc (%d, %d) returning 0x%x\n",  
>>>> nitems, bytes, retn);
>>>>   #endif
>>>>      return (retn);
>>>>   }
>>>>
>>>>
>>>>     It only gets this far then stops. Disabling threads makes it  
>>>> go again,
>>>> so for now I have disabled threads. I'm hoping that looking at  
>>>> the debug output
>>>> will tell us what memory is being lost as we should see the  
>>>> allocs but no frees.
>>>>
>>>> Peter Van Epp / Operations and Technical Support Simon Fraser  
>>>> University, Burnaby, B.C. Canada
>>>
>