argus-3.0.3.11 on the developers server

Guy Dickinson guy.dickinson at nyu.edu
Thu Jun 3 15:38:38 EDT 2010


Hi all,
I've tried running this on RHEL5 x86 and x86_64 systems with Endace DAG
cards, with libpcap 1.0.0 and 1.1.1 compiled against the DAG drivers.
Argus 3.0.3.11 appears to exit silently when trying to capture from a
DAG card. Argus 3.0.2 does not do this.

The debug output follows this message. If there are other diagnostic
materials that would be useful, please let me know.

Thanks,
Guy

*****

$ argus -X -i dag0:0 -D10
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.062753 ArgusCalloc (1, 740)
returning 0x8cac008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.062944 ArgusNewModeler()
returning 0x8cac008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.062980 ArgusCalloc (1,
4229676) returning 0xb7bb1008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063007 ArgusNewSource()
returning 0xb7bb1008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063030 ArgusCalloc (1, 196)
returning 0x8cac348
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063051 ArgusCalloc (1, 88)
returning 0x8cac410
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063068 ArgusNewQueue ()
returning 0x8cac410
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063089 ArgusCalloc (1, 112)
returning 0x8cac940
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063109 ArgusNewList ()
returning 0x8cac940
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063126 ArgusCalloc (1, 112)
returning 0x8cac9b8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063143 ArgusNewList ()
returning 0x8cac9b8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063159 ArgusNewOutput()
returning retn 0x8cac348
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063185
setArgusMarReportInterval(60) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063218 setArgusID(0xb7bb1024,
0x0) done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063236 ArgusDeleteList (0x0,
2) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063254
clearArgusDevice(0xb7bb1008) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063270 setArgusPortNum(0)
returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063288
setArgusMarReportInterval(60) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063305 clearArgusConfiguration
() returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063322
clearArgusDevice(0xb7bb1008) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063339 ArgusCalloc (1, 112)
returning 0x8caca30
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063356 ArgusNewList ()
returning 0x8caca30
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019576 ArgusCalloc (1, 40)
returning 0x8cad838
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019624 ArgusPushFrontList
(0x8caca30, 0x8cad838, 1) returning 0x8cacaa8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019645 setArgusDevice(dag0:0 )
returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019665 setArgusInterfaceStatus(1)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019701 ArgusCalloc (1, 128)
returning 0x8cacdb0
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019719 getArgusID(0xb7bb1024) done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019737
ArgusGenerateInitialMar() returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019787 ArgusInitOutput() done
argus[20327]: 03 Jun 10 15:35:32.019826 started
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019899 ArgusPopFrontList
(0x8cad838) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019929 ArgusCalloc (1,
4229676) returning 0xb6aed008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019955 ArgusCalloc (1, 112)
returning 0x8cacec8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019974 ArgusNewList ()
returning 0x8cacec8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020002 ArgusCloneSource()
returning 0xb6aed008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020019 ArgusPopFrontList (0x0)
returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020036
clearArgusDevice(0xb6aed008) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020052 ArgusPushBackList
(0x8cacec8, 0x8cad838, 1) returning 1
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.019966
ArgusOutputProcess(0x8cac348) starting
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.020156 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.020181 ArgusOutputProcess()
waiting for input list
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024658 ArgusPopFrontList
(0x8cad838) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024724
ArgusOpenInterface(0xb6aed008, 'dag0:0') returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024743 ArgusPushBackList
(0x8cacec8, 0x8cad838, 1) returning 1
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024802 ArgusCalloc (1, 740)
returning 0x8cad030
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024834 ArgusCalloc (1, 44)
returning 0x8cacce0
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024899 ArgusCalloc (65536, 4)
returning 0xb6aac008
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024920 ArgusNewHashTable
(65536) returning 0x8cacce0
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024937 ArgusCalloc (1, 104)
returning 0x8cad318
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024962 ArgusCalloc (1, 88)
returning 0x8cacd50
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024979 ArgusNewQueue ()
returning 0x8cacd50
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024998 ArgusCalloc (1, 88)
returning 0x8cad7c0
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025014 ArgusNewQueue ()
returning 0x8cad7c0
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025031 ArgusCalloc (1, 112)
returning 0x8cacf40
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025050 ArgusCalloc (1, 40)
returning 0x8cacaa8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025067 ArgusCalloc (1, 56)
returning 0x8cacad8
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025085 ArgusInitMallocList
(688) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025101 ArgusInitModeler() done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025118 ArgusInitSource() returning
argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025184 ArgusGetPackets
(0xb6aed008) starting
argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025208 ArgusPopFrontList
(0x8cad838) returning
argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025226 ArgusPushFrontList
(0x8cacec8, 0x8cad838, 1) returning 0x0
argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025243 setArgusInterfaceStatus(1)
argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025263 ArgusGetPackets ()
returning
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.121931
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.121963 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.121982 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.122001 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.122017 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223927
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223946 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223963 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223982 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223999 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325892
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325913 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325930 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325947 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325965 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427875
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427896 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427913 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427930 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427947 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529857
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529878 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529895 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529912 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529928 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631838
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631857 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631874 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631890 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631932 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733820
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733840 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733857 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733873 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733890 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835802
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835821 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835838 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835854 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835871 ArgusOutputProcess()
waiting for input list
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936785
ArgusOutputStatusTime(0x8cac348) done
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936804 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936821 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936838 ArgusOutputProcess()
looping
argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936854 ArgusOutputProcess()
waiting for input list
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.027770 ArgusSourceProcess:
ArgusGetPackets[0] done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.027804 main()
ArgusSourceProcess returned: shuting down
argus[20327]: 03 Jun 10 15:35:33.027894 ArgusShutDown(0)
argus[20327]: 03 Jun 10 15:35:33.027945 argus [0x804cb02]
argus[20327]: 03 Jun 10 15:35:33.027980 argus [0x804d72f]
argus[20327]: 03 Jun 10 15:35:33.028011
/lib/libc.so.6(__libc_start_main+0xdc) [0x709e9c]
argus[20327]: 03 Jun 10 15:35:33.028041 argus [0x804af81]

argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028077 ArgusShutDown(Normal
Shutdown)

argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028095
ArgusCloseSource(0xb7bb1008) starting
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028117 ArgusModelerCleanUp
ArgusProcessQueue(0x8cacd50) processing status queue with 0 records
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028136 ArgusPopQueue
(0x8cacd50) returning 0x0
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028156 ArgusFree (0x8cacd50)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028173 ArgusDeleteQueue
(0x8cacd50) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028189 ArgusModelerCleanUp ()
returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028213 ArgusFree (0xb6aac008)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028231 ArgusFree (0x8cacce0)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028249 ArgusCalloc (1, 716)
returning 0x8cad868
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028269 ArgusMallocListRecord
(688) returning 0x8cad884
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028288 ArgusGenerateListRecord
(0x8cad030, 0x0, 48) done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028305 ArgusPushBackList
(0x8cac9b8, 0x8cad884, 1) returning 1
argus[20327.c0a6fbb7]: .028329 ArgusCloseModeler(0x8cad030) pushing
close record 0x8cad884
argus[20327.906b8fb7]: .028337 ArgusOutputStatusTime(0x8cac348) done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028347 ArgusFree (0x8cad318)
argus[20327.906b8fb7]: .028445 ArgusLoadList (0x8cac9b8, 0x8cac940) load
1 objects
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028454 ArgusFree (0x8cacf40)
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028473 ArgusPopFrontList
(0x8cad884) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028479
ArgusCloseModeler(0x8cad030)
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028522 ArgusOutputProcess()
received rec 0x8cad884 totals 1 seq 0
argus[20327.c0a6fbb7]: .028534 ArgusFree (0x8caca30)
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028547 ArgusFreeListRecord
(0x8cad884) returning
argus[20327.c0a6fbb7]:  ArgusDeleteList (0x8caca30, 3) returning
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028571 ArgusMallocListRecord
(688) returning 0x8cad884
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028582
ArgusCloseSource(0xb7bb1008) deleting source
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028596 getArgusID(0xb7bb1024) done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028620 ArgusCloseEvents() done
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028637
ArgusGenerateStatusMarRecord(0x8cac348, 48) returning 0x8cad884
argus[20327.c0a6fbb7]:  ArgusModelerCleanUp () returning
argus[20327.906b8fb7]:  ArgusOutputProcess() received stop record 0
records on the list
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028671
ArgusCloseModeler(0x8cac008)
argus[20327.906b8fb7]: .028685 ArgusFreeListRecord (0x8cad884) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028694 ArgusCloseOutput()
scheduling closure after 0 records
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028709 ArgusOutputProcess()
checking out clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028732 ArgusOutputProcess()
done with clients
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028749 ArgusOutputProcess()
shuting down 0
argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028820 ArgusOutputProcess()
exiting
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028871 ArgusFree (0x8cac9b8)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028895 ArgusDeleteList
(0x8cac9b8, 4) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028912 ArgusFree (0x8cac940)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028929 ArgusDeleteList
(0x8cac940, 4) returning
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028946 ArgusFree (0x8cacdb0)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028962
ArgusCloseOutput(0x8cac348) done
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028979 ArgusFree (0x8cac348)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028996 ArgusFree (0x8cac008)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.029024 ArgusFree (0xb7bb1008)
argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.029042 ArgusShutDown()

On 06/02/2010 04:27 PM, Carter Bullard wrote:
> Gentle people,
> Argus-[clients-]3.0.3.11 are on the server.
> 
>    http://qosient.com/argus/dev
> 
> This version fixes all the outstanding bugs on the list, and adds UDT transport flows,
> multiple BIND addresses for remote access, and support for the control plane monitoring
> strategy that was introduced with the ISIS routing support that was added in 3.0.3.10.  
> 
> With this we've added quite a bit of the "to-do" features to argus, multi-threaded packet
> processing to support multi-cores, improved archive management, through the SQL indexing
> support, control plane monitoring support, single argus multiple observation domains,
> and the beginning of 802.11 wireless control plane tracking, to round out our new control
> plane flow monitoring strategies.   And we've added UDP based argus record transport, so
> thats alot.
> 
> I'm going to stop adding new features and we'll release argus-3.0.4 in 10-14 days, and
> any new work now, will go into argus-[clients-]3.0.5, which will focus on archive management
> and performance.
> 
> Please give this new software a test run, especially if you reported bugs in the last month,
> to make sure its doing what you like.
> 
> Carter


-- 
------------------
Guy Dickinson, Network Security Analyst
NYU ITS Technology Security Services
guy.dickinson at nyu.edu
(212) 998-3052



More information about the argus mailing list