Oh, data is not going to be good, so I don't recommend reading data yet!!!
I'll have that tonight!!
Carter
Carter Bullard
QoSient LLC
150 E. 57th Street Suite 12D
New York, New York 10022
+1 212 588-9133 Phone
+1 212 588-9134 Fax
-----Original Message-----
From: Peter Van Epp <vanepp at sfu.ca>
Date: Thu, 23 Aug 2007 07:42:05
To:argus-info at lists.andrew.cmu.edu
Subject: Re: [ARGUS] Argus memory issues
Output is a little odd (I started a client which I hadn't before :-)):
test4:/var/log/argus vanepp$ ra -r com_argus -n
07-08-23 07:34:20 e <-> 3 5 192 7470 UNK
07-08-23 07:34:20 e <-> 1 1 90 90 UNK
07-08-23 07:34:20 e <-> 3 3 273 521 UNK
07-08-23 07:34:20 e <-> 2 2 120 120 UNK
07-08-23 07:34:20 e -> 2 0 124 0 UNK
07-08-23 07:34:20 e <-> 4 5 574 507 UNK
07-08-23 07:34:20 e <-> 66 43 98260 2580 UNK
07-08-23 07:34:20 v <-> 1 2 91 394 UNK
0 0 0 0 UNK
07-08-23 07:34:20 m -> 3 0 180 0 UNK
07-08-23 07:34:20 e <-> 8 9 709 1688 UNK
07-08-23 07:34:20 e <-> 6 6 428 581 UNK
07-08-23 07:34:20 e -> 1 0 134 0 UNK
07-08-23 07:34:20 e <-> 13 21 1158 25211 UNK
07-08-23 07:34:20 e <-> 1 1 78 218 UNK
07-08-23 07:34:20 e <-> 10 11 600 14538 UNK
0 0 0 0 UNK
07-08-23 07:34:20 e <-> 6 5 724 544 UNK
07-08-23 07:34:20 e -> 2 0 360 0 UNK
07-08-23 07:34:20 e -> 1 0 62 0 UNK
07-08-23 07:34:20 e -> 1 0 60 0 UNK
07-08-23 07:34:20 e -> 1 0 60 0 UNK
0 0 0 0 UNK
07-08-23 07:34:20 e <-> 4 4 6056 240 UNK
0 0 0 0 UNK
07-08-23 07:34:20 e <-> 1 1 60 363 UNK
07-08-23 07:34:20 e -> 1 0 74 0 UNK
0 0 0 0 UNK
0 0 0 0 UNK
07-08-23 07:34:20 e <-> 3 3 302 363 UNK
07-08-23 07:34:20 e <-> 5 5 561 573 UNK
07-08-23 07:34:20 e <-> 21 27 2829 29223 UNK
07-08-23 07:34:20 e <-> 16 23 2271 23078 UNK
07-08-23 07:34:20 e <-> 1 1 98 236 UNK
0 0 0 0 UNK
07-08-23 07:34:20 e -> 1 0 123 0 UNK
07-08-23 07:34:20 v <-> 1 1 60 63 UNK
07-08-23 07:34:20 e <-> 1 1 60 83 UNK
07-08-23 07:34:20 e <-> 2 2 326 136 UNK
07-08-23 07:34:20 e <-> 1 1 157 62 UNK
07-08-23 07:34:20 e <-> 1 1 60 60 UNK
07-08-23 07:34:20 e <-> 2 2 204 138 UNK
07-08-23 07:34:20 e <-> 1 2 60 120 UNK
0 0 0 0 UNK
07-08-23 07:34:20 e <-> 1 1 60 60 UNK
07-08-23 07:34:20 e <-> 1 1 60 60 UNK
07-08-23 07:34:20 e <-> 1 1 60 60 UNK
07-08-23 07 e -> 1 0 62 0 UNK
0 0 0 0 UNK
07-08-23 07 e <-> 2 1 122 62 UNK
07-08-23 07 e <-> 14 13 21084 820 UNK
0 0 0 0 UNK
07-08-23 07 e -> 1 0 126 0 UNK
ra[17062]: 07-08-23 07:34:34 ArgusReadStreamSocket (0x60f3e4) record length is zero
ra can no longer get by this particular record I don't know if that means our
zero length record bug is back or not.
As expected it has boosted memory use some, but not by a lot and
in a short sample it doesn't look to be growing that fast:
ps auxwwww | grep argus
root 11985 2.0 0.1 7752 4244 pts/0 SL 07:18 0:00 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root 11987 0.0 0.0 3132 832 pts/0 S+ 07:18 0:00 grep argus
hcids:/scratch # ps auxwwww | grep argus
root 11985 1.8 0.5 24108 20900 pts/0 SL 07:18 0:09 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root 11989 0.0 0.0 3132 832 pts/0 S+ 07:27 0:00 grep argus
hcids:/scratch # ps auxwwww | grep argus
root 11985 2.6 4.4 177452 173964 pts/0 SL 07:18 0:28 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root 12011 0.0 0.0 3132 832 pts/0 S+ 07:36 0:00 grep argus
hcids:/scratch # ps auxwwww | grep argus
ps auxwwww | grep argus
root 11985 2.5 4.4 177448 173960 pts/0 SL 07:18 0:30 argus -JR -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
root 12017 0.0 0.0 3132 832 pts/0 S+ 07:38 0:00 grep argus
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada