new code uploaded - argus cygwin support
Peter Van Epp
vanepp at sfu.ca
Wed Sep 12 23:10:53 EDT 2007
Still looks good a little way in. OpenBSD is still happy, it doesn't
complain about the free when HUPed so it seems to be happy with the string
dup. Ra on the Mac reading a capture file (which used to balloon to over a gig
of memory) stayed down at the 30 meg level:
vanepp 7018 2.2 -0.1 30872 2080 p1 S 7:40PM 0:01.76 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7029 0.0 -0.0 27336 360 p2 R+ 7:42PM 0:00.00 grep ra3
test4:~ vanepp$ ps auxwww | grep ra3
vanepp 7025 100.0 -0.5 37136 11492 p1 R+ 7:41PM 0:25.47 ra3 -r com_argus -n
vanepp 7018 1.1 -0.1 30872 2080 p1 S 7:40PM 0:01.89 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7031 0.0 -0.0 18052 288 p2 R+ 7:42PM 0:00.00 grep ra3
test4:~ vanepp$ ps auxwww | grep ra3
vanepp 7025 100.0 -0.6 38180 13056 p1 R+ 7:41PM 0:31.81 ra3 -r com_argus -n
vanepp 7018 1.3 -0.1 30872 2080 p1 S 7:40PM 0:01.99 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7033 0.0 -0.0 27376 420 p2 S+ 7:42PM 0:00.00 grep ra3
test4:~ vanepp$ ps auxwww | grep ra3
vanepp 7025 100.0 -0.7 40268 15176 p1 R+ 7:41PM 0:40.68 ra3 -r com_argus -n
vanepp 7018 1.1 -0.1 30872 2080 p1 S 7:40PM 0:02.13 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7035 0.0 -0.0 27336 356 p2 R+ 7:42PM 0:00.00 grep ra3
test4:~ vanepp$ ps auxwww | grep ra3
vanepp 7025 100.0 -0.8 41312 16908 p1 R+ 7:41PM 0:48.08 ra3 -r com_argus -n
vanepp 7018 1.0 -0.1 30872 2080 p1 S 7:40PM 0:02.24 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7037 0.0 -0.0 27336 348 p2 R+ 7:42PM 0:00.00 grep ra3
test4:~ vanepp$ ps auxwww | grep ra3
vanepp 7018 2.0 -0.1 30872 2080 p1 S 7:40PM 0:02.36 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7039 0.0 -0.0 27336 340 p2 R+ 7:42PM 0:00.00 grep ra3
argus on the sensor is low (but so is traffic right now the acid test
will be tomorrow :-)):
ps auxwwww | grep argus
root 12857 12.5 0.9 40596 37092 ? SL 19:37 3:29 argus -J -P 560 -i eth0 -i eth1 -U 512 -m -F /scratch/argus.conf
as is the ra listening to the argus:
vanepp 7018 1.0 -0.1 30872 2140 p1- S 7:40PM 0:20.11 /usr/local/bin/ra3 -S 192.75.244.191:560 -n -D4 -w /var/log/argus/com_argus
vanepp 7092 0.7 -0.0 27336 340 p1 R+ 8:06PM 0:00.00 grep ra3
a quick look didn't see any missing or zero time stamps (although a
more careful look with a script is probably in order). Looks good so far.
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list