simple ra time filter question...

[Carter Bullard]

Hey Aashish,
Hmmm, it seems that the strace() is suggesting that argus thinks the
interface is down?  Are you getting any kind of syslog messages
from argus saying that the interface is/was down?

So, how long did it run before it stopped, and was argus writing
management records to the output file?  You know, I don't recommend
that your argus write to a file, but you should have another process  
that
reads the output and writes it to disk on another machine.

Carter


On Jan 4, 2007, at 12:39 PM, Aashish Sharma wrote:

> Hi Carter :
>
> I am running Argus (Version 3.0.0.rc.36) on a Redhat Enterprise  
> version 4.0 over DAG cards. Argus is running fine now. However  
> today I saw that the Argus process is running but its not dumping  
> data to the file.
>
> ( The links are live and are seeing data. I killed Argus and  
> restarted and now its capturing data).
>
> This is the output from strace if this is of any help :
>
> restart_syscall(<... resuming interrupted call ...>) = 0
> gettimeofday({1167928565, 717837}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 720959}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 723950}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 726948}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 729947}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 732947}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 735947}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 738946}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 741945}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 744944}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 747944}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 750943}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 753941}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 756940}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 759941}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 762939}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 765941}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 768943}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 771940}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 774936}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 778030}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 780935}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 783936}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 786934}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 789933}, NULL) = 0
> nanosleep({0, 1000000}, NULL)           = 0
> gettimeofday({1167928565, 792931}, NULL) = 0
> select(7, [4 6], NULL, NULL, {0, 20000}) = 2 (in [4 6], left {0,  
> 20000})
> gettimeofday({1167928565, 793103}, NULL) = 0
>
>