Argus 3.0 and Fedora 9

[Carter Bullard]

Hey Mike,
I use Fedora all the time.  So what is the INTERFACE line in your
argus.conf file look like?  It could be opening the wrong interface?

Carter

On Mar 2, 2009, at 6:05 PM, Mike Iglesias wrote:

> I'm having trouble getting argus 3.0 to read from eth1 and writing  
> it's data
> out to a file on a Fedora 9 system with kernel  
> 2.6.27.15-78.2.23.fc9.i686.  I
> can see the traffic with tcpdump, so I know there's data coming in  
> on eth1.  I
> built argus with .debug and ran it with -D 10.  I see this in the  
> output:
>
>  ArgusWarning: argus[22618]: 02 Mar 09 14:56:52.802236
> ArgusGetInterfaceStatus: interface eth1 is up
> argus[22618]: 02 Mar 09 14:56:52.802272 setArgusInterfaceStatus(1)
> argus[22618]: 02 Mar 09 14:56:53.001399 ArgusGetPackets: select()  
> returned 0
> argus[22618]: 02 Mar 09 14:56:53.001445 ArgusGetPackets: select()  
> timeout 1 up
> interfaces
> argus[22618]: 02 Mar 09 14:56:53.001561 ArgusUpdateTime (0x9064008)  
> global
> time 1236034613.001443 update 1236034613.201443 returning 1
> argus[22618]: 02 Mar 09 14:56:53.001582 ArgusPopFrontList  
> (0x9064da0) returning
> argus[22618]: 02 Mar 09 14:56:53.001599 ArgusPushFrontList (0x9064b48,
> 0x9064da0, 1) returning 0x9064da0
> argus[22618]: 02 Mar 09 14:56:53.001625  
> ArgusProcessQueueTimeout(0x9064008,
> 0x90643e0) done
> argus[22618]: 02 Mar 09 14:56:53.001645 ArgusQueueManager() turns 1
> statusQueue 0    qs 0  items 0    cache 0      resort 0      reclaim 0
> new 0      send
> s 0        bsends 0
> argus[22618]: 02 Mar 09 14:56:53.001680  
> ArgusOutputProcess(0x9064910) starting
> argus[22618]: 02 Mar 09 14:56:53.001703  
> ArgusOutputStatusTime(0x9064910) done
> argus[22618]: 02 Mar 09 14:56:53.201399 ArgusGetPackets: select()  
> returned 0
> argus[22618]: 02 Mar 09 14:56:53.201433 ArgusGetPackets: select()  
> timeout 1 up
> interfaces
> argus[22618]: 02 Mar 09 14:56:53.401399 ArgusGetPackets: select()  
> returned 0
> argus[22618]: 02 Mar 09 14:56:53.401431 ArgusGetPackets: select()  
> timeout 1 up
> interfaces
> argus[22618]: 02 Mar 09 14:56:53.401449 ArgusUpdateTime (0x9064008)  
> global
> time 1236034613.401429 update 1236034613.401443 returning 1
> argus[22618]: 02 Mar 09 14:56:53.401469 ArgusPopFrontList  
> (0x9064da0) returning
> argus[22618]: 02 Mar 09 14:56:53.401491 ArgusPushFrontList (0x9064b48,
> 0x9064da0, 1) returning 0x9064da0
> argus[22618]: 02 Mar 09 14:56:53.401518  
> ArgusProcessQueueTimeout(0x9064008,
> 0x90643e0) done
> argus[22618]: 02 Mar 09 14:56:53.401542 ArgusQueueManager() turns 2
> statusQueue 0    qs 0  items 0    cache 0      resort 0      reclaim 0
> new 0      send
> s 0        bsends 0
> argus[22618]: 02 Mar 09 14:56:53.401573  
> ArgusOutputProcess(0x9064910) starting
> argus[22618]: 02 Mar 09 14:56:53.401593  
> ArgusOutputStatusTime(0x9064910) done
> argus[22618]: 02 Mar 09 14:56:53.601398 ArgusGetPackets: select()  
> returned 0
> argus[22618]: 02 Mar 09 14:56:53.601430 ArgusGetPackets: select()  
> timeout 1 up
> interfaces
> argus[22618]: 02 Mar 09 14:56:53.601447 ArgusUpdateTime (0x9064008)  
> global
> time 1236034613.601428 update 1236034613.601443 returning 1
> argus[22618]: 02 Mar 09 14:56:53.601468 ArgusPopFrontList  
> (0x9064da0) returning
> argus[22618]: 02 Mar 09 14:56:53.601485 ArgusPushFrontList (0x9064b48,
> 0x9064da0, 1) returning 0x9064da0
> argus[22618]: 02 Mar 09 14:56:53.601509  
> ArgusProcessQueueTimeout(0x9064008,
> 0x90643e0) done
> argus[22618]: 02 Mar 09 14:56:53.601526 ArgusQueueManager() turns 3
> statusQueue 0    qs 0  items 0    cache 0      resort 0      reclaim 0
> new 0      send
> s 0        bsends 0
> argus[22618]: 02 Mar 09 14:56:53.601548  
> ArgusOutputProcess(0x9064910) starting
> argus[22618]: 02 Mar 09 14:56:53.601568  
> ArgusOutputStatusTime(0x9064910) done
> argus[22618]: 02 Mar 09 14:56:53.801397 ArgusGetPackets: select()  
> returned 0
>
>
> Does anyone have argus running on a Fedora 9 system?
>
>
> -- 
> Mike Iglesias                          Email:       iglesias at uci.edu
> University of California, Irvine       phone:       949-824-6926
> Network & Academic Computing Services  FAX:         949-824-2270
>

Carter Bullard
CEO/President
QoSient, LLC
150 E 57th Street Suite 12D
New York, New York  10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax