argus-3.0.3.11 on the developers server

[Carter Bullard]

Hey Guy,
I may need to debug this myself, any chance I can get direct access?
Or I can 'come on down', so to speak, tomorrow early or Monday?

Carter

On Jun 3, 2010, at 3:38 PM, Guy Dickinson wrote:

> Hi all,
> I've tried running this on RHEL5 x86 and x86_64 systems with Endace DAG
> cards, with libpcap 1.0.0 and 1.1.1 compiled against the DAG drivers.
> Argus 3.0.3.11 appears to exit silently when trying to capture from a
> DAG card. Argus 3.0.2 does not do this.
> 
> The debug output follows this message. If there are other diagnostic
> materials that would be useful, please let me know.
> 
> Thanks,
> Guy
> 
> *****
> 
> $ argus -X -i dag0:0 -D10
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.062753 ArgusCalloc (1, 740)
> returning 0x8cac008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.062944 ArgusNewModeler()
> returning 0x8cac008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.062980 ArgusCalloc (1,
> 4229676) returning 0xb7bb1008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063007 ArgusNewSource()
> returning 0xb7bb1008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063030 ArgusCalloc (1, 196)
> returning 0x8cac348
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063051 ArgusCalloc (1, 88)
> returning 0x8cac410
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063068 ArgusNewQueue ()
> returning 0x8cac410
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063089 ArgusCalloc (1, 112)
> returning 0x8cac940
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063109 ArgusNewList ()
> returning 0x8cac940
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063126 ArgusCalloc (1, 112)
> returning 0x8cac9b8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063143 ArgusNewList ()
> returning 0x8cac9b8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063159 ArgusNewOutput()
> returning retn 0x8cac348
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063185
> setArgusMarReportInterval(60) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063218 setArgusID(0xb7bb1024,
> 0x0) done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063236 ArgusDeleteList (0x0,
> 2) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063254
> clearArgusDevice(0xb7bb1008) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063270 setArgusPortNum(0)
> returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063288
> setArgusMarReportInterval(60) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063305 clearArgusConfiguration
> () returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063322
> clearArgusDevice(0xb7bb1008) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063339 ArgusCalloc (1, 112)
> returning 0x8caca30
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:31.063356 ArgusNewList ()
> returning 0x8caca30
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019576 ArgusCalloc (1, 40)
> returning 0x8cad838
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019624 ArgusPushFrontList
> (0x8caca30, 0x8cad838, 1) returning 0x8cacaa8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019645 setArgusDevice(dag0:0 )
> returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019665 setArgusInterfaceStatus(1)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019701 ArgusCalloc (1, 128)
> returning 0x8cacdb0
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019719 getArgusID(0xb7bb1024) done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019737
> ArgusGenerateInitialMar() returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019787 ArgusInitOutput() done
> argus[20327]: 03 Jun 10 15:35:32.019826 started
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019899 ArgusPopFrontList
> (0x8cad838) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019929 ArgusCalloc (1,
> 4229676) returning 0xb6aed008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019955 ArgusCalloc (1, 112)
> returning 0x8cacec8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.019974 ArgusNewList ()
> returning 0x8cacec8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020002 ArgusCloneSource()
> returning 0xb6aed008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020019 ArgusPopFrontList (0x0)
> returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020036
> clearArgusDevice(0xb6aed008) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.020052 ArgusPushBackList
> (0x8cacec8, 0x8cad838, 1) returning 1
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.019966
> ArgusOutputProcess(0x8cac348) starting
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.020156 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.020181 ArgusOutputProcess()
> waiting for input list
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024658 ArgusPopFrontList
> (0x8cad838) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024724
> ArgusOpenInterface(0xb6aed008, 'dag0:0') returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024743 ArgusPushBackList
> (0x8cacec8, 0x8cad838, 1) returning 1
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024802 ArgusCalloc (1, 740)
> returning 0x8cad030
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024834 ArgusCalloc (1, 44)
> returning 0x8cacce0
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024899 ArgusCalloc (65536, 4)
> returning 0xb6aac008
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024920 ArgusNewHashTable
> (65536) returning 0x8cacce0
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024937 ArgusCalloc (1, 104)
> returning 0x8cad318
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024962 ArgusCalloc (1, 88)
> returning 0x8cacd50
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024979 ArgusNewQueue ()
> returning 0x8cacd50
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.024998 ArgusCalloc (1, 88)
> returning 0x8cad7c0
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025014 ArgusNewQueue ()
> returning 0x8cad7c0
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025031 ArgusCalloc (1, 112)
> returning 0x8cacf40
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025050 ArgusCalloc (1, 40)
> returning 0x8cacaa8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025067 ArgusCalloc (1, 56)
> returning 0x8cacad8
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025085 ArgusInitMallocList
> (688) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025101 ArgusInitModeler() done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:32.025118 ArgusInitSource() returning
> argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025184 ArgusGetPackets
> (0xb6aed008) starting
> argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025208 ArgusPopFrontList
> (0x8cad838) returning
> argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025226 ArgusPushFrontList
> (0x8cacec8, 0x8cad838, 1) returning 0x0
> argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025243 setArgusInterfaceStatus(1)
> argus[20327.90bbaab6]: 03 Jun 10 15:35:32.025263 ArgusGetPackets ()
> returning
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.121931
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.121963 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.121982 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.122001 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.122017 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223927
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223946 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223963 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223982 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.223999 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325892
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325913 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325930 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325947 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.325965 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427875
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427896 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427913 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427930 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.427947 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529857
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529878 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529895 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529912 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.529928 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631838
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631857 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631874 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631890 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.631932 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733820
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733840 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733857 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733873 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.733890 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835802
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835821 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835838 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835854 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.835871 ArgusOutputProcess()
> waiting for input list
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936785
> ArgusOutputStatusTime(0x8cac348) done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936804 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936821 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936838 ArgusOutputProcess()
> looping
> argus[20327.906b8fb7]: 03 Jun 10 15:35:32.936854 ArgusOutputProcess()
> waiting for input list
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.027770 ArgusSourceProcess:
> ArgusGetPackets[0] done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.027804 main()
> ArgusSourceProcess returned: shuting down
> argus[20327]: 03 Jun 10 15:35:33.027894 ArgusShutDown(0)
> argus[20327]: 03 Jun 10 15:35:33.027945 argus [0x804cb02]
> argus[20327]: 03 Jun 10 15:35:33.027980 argus [0x804d72f]
> argus[20327]: 03 Jun 10 15:35:33.028011
> /lib/libc.so.6(__libc_start_main+0xdc) [0x709e9c]
> argus[20327]: 03 Jun 10 15:35:33.028041 argus [0x804af81]
> 
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028077 ArgusShutDown(Normal
> Shutdown)
> 
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028095
> ArgusCloseSource(0xb7bb1008) starting
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028117 ArgusModelerCleanUp
> ArgusProcessQueue(0x8cacd50) processing status queue with 0 records
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028136 ArgusPopQueue
> (0x8cacd50) returning 0x0
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028156 ArgusFree (0x8cacd50)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028173 ArgusDeleteQueue
> (0x8cacd50) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028189 ArgusModelerCleanUp ()
> returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028213 ArgusFree (0xb6aac008)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028231 ArgusFree (0x8cacce0)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028249 ArgusCalloc (1, 716)
> returning 0x8cad868
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028269 ArgusMallocListRecord
> (688) returning 0x8cad884
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028288 ArgusGenerateListRecord
> (0x8cad030, 0x0, 48) done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028305 ArgusPushBackList
> (0x8cac9b8, 0x8cad884, 1) returning 1
> argus[20327.c0a6fbb7]: .028329 ArgusCloseModeler(0x8cad030) pushing
> close record 0x8cad884
> argus[20327.906b8fb7]: .028337 ArgusOutputStatusTime(0x8cac348) done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028347 ArgusFree (0x8cad318)
> argus[20327.906b8fb7]: .028445 ArgusLoadList (0x8cac9b8, 0x8cac940) load
> 1 objects
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028454 ArgusFree (0x8cacf40)
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028473 ArgusPopFrontList
> (0x8cad884) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028479
> ArgusCloseModeler(0x8cad030)
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028522 ArgusOutputProcess()
> received rec 0x8cad884 totals 1 seq 0
> argus[20327.c0a6fbb7]: .028534 ArgusFree (0x8caca30)
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028547 ArgusFreeListRecord
> (0x8cad884) returning
> argus[20327.c0a6fbb7]:  ArgusDeleteList (0x8caca30, 3) returning
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028571 ArgusMallocListRecord
> (688) returning 0x8cad884
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028582
> ArgusCloseSource(0xb7bb1008) deleting source
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028596 getArgusID(0xb7bb1024) done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028620 ArgusCloseEvents() done
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028637
> ArgusGenerateStatusMarRecord(0x8cac348, 48) returning 0x8cad884
> argus[20327.c0a6fbb7]:  ArgusModelerCleanUp () returning
> argus[20327.906b8fb7]:  ArgusOutputProcess() received stop record 0
> records on the list
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028671
> ArgusCloseModeler(0x8cac008)
> argus[20327.906b8fb7]: .028685 ArgusFreeListRecord (0x8cad884) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028694 ArgusCloseOutput()
> scheduling closure after 0 records
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028709 ArgusOutputProcess()
> checking out clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028732 ArgusOutputProcess()
> done with clients
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028749 ArgusOutputProcess()
> shuting down 0
> argus[20327.906b8fb7]: 03 Jun 10 15:35:33.028820 ArgusOutputProcess()
> exiting
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028871 ArgusFree (0x8cac9b8)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028895 ArgusDeleteList
> (0x8cac9b8, 4) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028912 ArgusFree (0x8cac940)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028929 ArgusDeleteList
> (0x8cac940, 4) returning
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028946 ArgusFree (0x8cacdb0)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028962
> ArgusCloseOutput(0x8cac348) done
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028979 ArgusFree (0x8cac348)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.028996 ArgusFree (0x8cac008)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.029024 ArgusFree (0xb7bb1008)
> argus[20327.c0a6fbb7]: 03 Jun 10 15:35:33.029042 ArgusShutDown()
> 
> On 06/02/2010 04:27 PM, Carter Bullard wrote:
>> Gentle people,
>> Argus-[clients-]3.0.3.11 are on the server.
>> 
>>   http://qosient.com/argus/dev
>> 
>> This version fixes all the outstanding bugs on the list, and adds UDT transport flows,
>> multiple BIND addresses for remote access, and support for the control plane monitoring
>> strategy that was introduced with the ISIS routing support that was added in 3.0.3.10.  
>> 
>> With this we've added quite a bit of the "to-do" features to argus, multi-threaded packet
>> processing to support multi-cores, improved archive management, through the SQL indexing
>> support, control plane monitoring support, single argus multiple observation domains,
>> and the beginning of 802.11 wireless control plane tracking, to round out our new control
>> plane flow monitoring strategies.   And we've added UDP based argus record transport, so
>> thats alot.
>> 
>> I'm going to stop adding new features and we'll release argus-3.0.4 in 10-14 days, and
>> any new work now, will go into argus-[clients-]3.0.5, which will focus on archive management
>> and performance.
>> 
>> Please give this new software a test run, especially if you reported bugs in the last month,
>> to make sure its doing what you like.
>> 
>> Carter
> 
> 
> -- 
> ------------------
> Guy Dickinson, Network Security Analyst
> NYU ITS Technology Security Services
> guy.dickinson at nyu.edu
> (212) 998-3052
> 

Carter Bullard
CEO/President
QoSient, LLC
150 E 57th Street Suite 12D
New York, New York  10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100610/9787489e/attachment.bin>