Argus memory issues

Peter Van Epp vanepp at sfu.ca
Thu Aug 23 10:34:07 EDT 2007


	Still looks good. First the original version after it ran all night:

ps auxwwww | grep argus
root      7812  3.3  2.0  84948 81672 ?        SL   Aug22  28:12 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
vanepp    9428  0.0  0.0   3132   832 pts/0    S+   07:13   0:00 grep argus

hcids:/scratch # cat debug.log
  ArgusWarning: argus[7812]: 31 Dec 69 16:00:13.270505 started
  ArgusWarning: argus[7812]: 03 Mar 44 02:17:04.268843 ArgusGetInterfaceStatus: interface eth1 is up
  ArgusWarning: argus[7812]: 03 Mar 44 02:17:04.268843 ArgusGetInterfaceStatus: interface eth0 is up
argus: Time 50459.211263 Flows 24984851  Closed 24984851  Sends 25946033  BSends 11491   
       Updates 327868717 Cache 302883866
       Total Memory 203022162 Free 203022160 MaxBytes 2147483636
Source: 
    Total Pkts 174516478  Rate 3458.565317
/nSource: 
    Total Pkts 153108888  Rate 3034.309974

	Then the lastest version with .memory (but not yet .threads) this
morning:

argus -JR -P 560 -i eth0 -i eth1 -U 512 -m  -F /scratch/argus.conf >/scratch/debug.log 2>&1 &
[1] 11977
hcids:/scratch # !ps
ps auxwwww | grep argus
root     11977  1.6  0.1   7752  4324 pts/0    SL   07:17   0:00 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root     11979  0.0  0.0   3132   832 pts/0    S+   07:17   0:00 grep argus
hcids:/scratch # ps auxwwww | grep argus
root     11977  1.7  0.2  14900 11660 pts/0    SL   07:17   0:00 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root     11981  0.0  0.0   3132   832 pts/0    S+   07:18   0:00 grep argus
hcids:/scratch # kill -HUP 11977
hcids:/scratch # !ps
ps auxwwww | grep argus
root     11983  0.0  0.0   3132   832 pts/0    S+   07:18   0:00 grep argus
[1]+  Done                    argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf >/scratch/debug.log 2>&1
hcids:/scratch # cat debug.log
  ArgusWarning: argus[11977]: 31 Dec 69 16:00:02.-35451 started
  ArgusWarning: argus[11977]: 31 Dec 69 16:00:00.000000 ArgusGetInterfaceStatus: interface eth1 is up
  ArgusWarning: argus[11977]: 31 Dec 69 16:00:00.000000 ArgusGetInterfaceStatus: interface eth0 is up
argus: Time 68.474211 Flows 26356     Closed 26356     Sends 35503     BSends 0       
       Updates 401960   Cache 375604  
       Total Memory 336958   Free 336955   MaxBytes 7239168
Source: eth1
    Total Pkts   221236  Rate 3230.939017
/nSource: eth0
    Total Pkts   180683  Rate 2638.701452
hcids:/scratch # argus -JR -P 560 -i eth0 -i eth1 -U 512 -m  -F /scratch/argus.conf >/scratch/debug.log 2>&1 &
[1] 11985
hcids:/scratch # !ps
ps auxwwww | grep argus
root     11985  2.0  0.1   7752  4244 pts/0    SL   07:18   0:00 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root     11987  0.0  0.0   3132   832 pts/0    S+   07:18   0:00 grep argus
hcids:/scratch # ps auxwwww | grep argus
root     11985  1.8  0.5  24108 20900 pts/0    SL   07:18   0:09 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root     11989  0.0  0.0   3132   832 pts/0    S+   07:27   0:00 grep argus

and we will see how this goes as traffic picks up for the day.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada



More information about the argus mailing list