Argus on Bivio 7500

[Jason Carr]

argus[5874]: 10 Aug 09 11:24:04.039909 ArgusGetPackets returning:  
noerror 1 eNflag -1 ArgusShutDownStarted 0

On Aug 10, 2009, at 12:42 AM, Peter Van Epp wrote:

> On Sun, Aug 09, 2009 at 08:16:29PM -0400, Jason Carr wrote:
>> Adding some debug code or running gdb and setting a breakpoint on
>> pcap_dispatch, it doesn't seem like the pcap_dispatch code is ever
>> executing.
>>
>> I'm not sure if their pcap supports selectable fd's or how to check.
>> There's also two types of interfaces I'm dealing with, the physical
>> interfaces and the default pseudo interface.
>>
>> Thanks,
>>
>> Jason
>>
>
> 	It looks to me like it would be profitable to add a debug statement
> like this after argus/ArgusSource.c line 2249:
>
>  } while (noerror && src->eNflag != 0) && (!(ArgusShutDownStarted)));
>
> #ifdef ARGUSDEBUG
>    ArgusDebug(4, "ArgusGetPackets returning: noerror %d eNflag %d  
> ArgusShutDownStarted %d\n". noerror, src->eNflag,  
> ArgusShutDownStarted);
> #endif
>
> 	That should tell us what triggered the shutdown. With the lack of any
> pcap related error messages my guess is a timeout setting  
> ArgusShutDownStarted
> as I think any pcap related fault should give a debug message which  
> isn't
> present (note I assumed all the values are int without checking :-)).
>
> Peter Van Epp
>