bug with interfaces that are not up
MN
m.newton at stanford.edu
Tue May 6 19:20:25 EDT 2008
On a Linux 2.6.20-16-server build, with a ~3 week old version of Argus3:
If ones config file has:
# fgrep eth /etc/argus.conf
ARGUS_INTERFACE=eth0
ARGUS_INTERFACE=eth1
ARGUS_INTERFACE=eth5
but
/sbin/ifconfig eth5 up
has not been run, then argus will not collect most traffic
on eth0 and eth1 (even though they are up). It drops all
but about .5% of the traffic.
Obviously not a config I should do, but since there wasn't
any traffic on eth5 yet, I had not worried about it.
- mike
More information about the argus
mailing list