Argus server exits with "maximum errors exceeded 200000"

Guy Dickinson guy.dickinson at nyu.edu
Mon Nov 23 10:39:36 EST 2009


[my apologies, this should have gone to the list]

Peter Van Epp wrote:

> > 	It may be profitable to change the 6 to a 1 at line 1443 in
> > argus/ArgusUtil.c i.e.:
> >
> > ArgusDebug (6,"ArgusWriteSocket: write returned %d, errno
%d\n",retn, errno);
> >
> > to
> >
> > ArgusDebug (1,"ArgusWriteSocket: write returned %d, errno
%d\n",retn, errno);
> >

I've now done so, and after another crash, the debug output looks like this:

argus[1265]: 22 Nov 09 01:22:21.797208 main() ArgusGetPackets returned:
shuting down

argus[1265]: 22 Nov 09 01:22:21.797787 ArgusShutDown(Normal Shutdown)

argus[1265]: 22 Nov 09 01:22:21.797855 ArgusCloseSource(0xb7e69008) starting
argus[1265]: 22 Nov 09 01:22:21.797917 ArgusCloseSource(0xb7e69008)
deleting source
argus[1265]: 22 Nov 09 01:22:21.798007 ArgusCloseModeler(0x9470008)
pushing close record 0x3243f27c
argus[1265]: 22 Nov 09 01:22:21.798064 ArgusCloseModeler(0x9470008)
argus[1265]: 22 Nov 09 01:22:21.798125 ArgusCloseOutput() scheduling
closure after writing records
argus[1265]: 22 Nov 09 01:22:21.798226 ArgusOutputProcess() received
stop record 0 records on the list
argus[1265]: 22 Nov 09 01:22:22.199980 ArgusWriteOutSocket(0xad15e008)
maximum errors exceeded 200000
argus[1265]: 22 Nov 09 01:22:23.050160 ArgusCloseOutput(0x94704e8) done
argus[1265]: 22 Nov 09 01:22:23.050243 ArgusShutDown()

Any further insight would be much appreciated.

Thanks!
Guy


-- ------------------ Guy Dickinson, Network Security Analyst NYU ITS
Technology Security Services guy.dickinson at nyu.edu (212) 998-3052



More information about the argus mailing list