connection refused

[Carter Bullard]

Hey Sean,
'connection refused' means that OS is rejecting the request, which can come from an argus
problem, or a host issue, such as firewalls, iptables?, tcpwrappers() not being configured
properly (/etc/hosts.allow and /etc/hosts.deny) or argus not being configured properly.

There should be a message in your system logs indicating why the connection request
was rejected, at least in most situations.

Use "netstat -na | fgrep 561", or "lsof -n | fgrep argus"  to see if argus has put a listen down
on the appropriate port.

This is what I get:

osiris:~ carter$ netstat -na | fgrep 561
tcp46      0      0  *.561                  *.*                    LISTEN

osiris:~ root# lsof -n | fgrep argus
argus     31325           root  cwd       DIR       14,2       986 11298283 /Users/carter/Downloads/argus-3.0.3.19
argus     31325           root  txt       REG       14,2    385824 11300900 /usr/local/sbin/argus
argus     31325           root  txt       REG       14,2    710528 10123726 /usr/lib/libpcap.A.dylib
argus     31325           root  txt       REG       14,2    117152  8482805 /usr/lib/libwrap.7.dylib
argus     31325           root  txt       REG       14,2     96280 10935555 /opt/local/lib/libz.1.2.5.dylib
argus     31325           root  txt       REG       14,2   1054960 10458061 /usr/lib/dyld
argus     31325           root  txt       REG       14,2 204935168 11064640 /private/var/db/dyld/dyld_shared_cache_x86_64
argus     31325           root    0                                         (revoked)
argus     31325           root    1w      CHR        3,2       0t0      299 /dev/null
argus     31325           root    2w      CHR        3,2       0t0      299 /dev/null
argus     31325           root    3u     IPv6 0x0502daa0       0t0      TCP *:monitor (LISTEN)
argus     31325           root    4u      CHR       23,0 0xd9dd89b      568 /dev/bpf0
argus     31325           root    5u     IPv4 0x069451b8       0t0      UDP *:*



If nothing like this comes up, check out your /etc/argus.conf file, and fix the ARGUS_ACCESS_PORT
variable setting.  Common errors are that you are not running as "root", so it doesn't have permissions
to use the default port 561, or you may have configured argus to use another port,  and your clients
aren't using that other port.

If these two things look reasonable, then consider a firewall or tcpwrapper configuration problem.
That should get you started,

Carter

On Nov 9, 2010, at 11:45 AM, Sean Malone wrote:

> Hello all,
> 
> I'm very new to Argus. I've got Argus 3.0.2 server and client running on FreeBSD 8.1 The server runs fine, however if I try to use any of the client programs I get the following error "ArgusWarning............. connect to host failed 'Connection refuesed'.  Can anyone help me to understand what I"m missing?  Thanks.
> 
> Sean
> 
> 
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20101109/7573add4/attachment.bin>