bug with interfaces that are not up

MN m.newton at stanford.edu
Tue May 6 19:20:25 EDT 2008


On a Linux 2.6.20-16-server build, with a ~3 week old version of Argus3:

If ones config file has:

    # fgrep eth /etc/argus.conf
    ARGUS_INTERFACE=eth0
    ARGUS_INTERFACE=eth1
    ARGUS_INTERFACE=eth5

but

    /sbin/ifconfig eth5 up

has not been run, then argus will not collect most traffic
on eth0 and eth1 (even though they are up).  It drops all
but about .5% of the traffic.

Obviously not a config I should do, but since there wasn't
any traffic on eth5 yet, I had not worried about it.  

- mike




More information about the argus mailing list