racluster exits

Torbjorn.Wictorin at its.uu.se Torbjorn.Wictorin at its.uu.se
Fri Dec 28 08:36:11 EST 2007


Hi Cartel et al,

I have a configuration with a number of argus:es (half-duplex sensors,
multiple paths) connected together via radium.
Output from radium is piped(|) to racluster:

radium -w - -S 127.0.0.1:561 ... -e 1000 -T yes | racluster -w argus.log

racluster.conf:
RACLUSTER_AUTO_CORRECTION=yes
filter="" model="saddr sport daddr dport proto" status=0 idle=900

The problem is that racluster exits after some time, after eating up 
memory, not writing anything to argus.log before it decides to exit.

Looks like racluster needs some flush-trigger. Have I misunderstood something?

latest clients: 3.0.0.rc.66

Torbjörn Wictorin,
Uppsala Univ


More information about the argus mailing list