Too many inputs

carter at qosient.com carter at qosient.com
Mon Nov 29 08:46:33 EST 2010


Hey Rafael,
The number of inputs is a constant defined in the ./argus/ArgusSource.h include file.  You can increase that number to whatever to process files, but there are limits to the number of fd's that you may run into.

What version are you running, I couldn't find your exact error string in the 3.0.3 codebase.  Just curious.

Carter 


Carter 

Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: Rafael Barbosa <rrbarbosa at gmail.com>
Sender: argus-info-bounces+carter=qosient.com at lists.andrew.cmu.edu
Date: Fri, 26 Nov 2010 14:34:58 
To: Argus<argus-info at lists.andrew.cmu.edu>
Subject: [ARGUS] Too many inputs

Hi all,

When trying to read several hundreds of small pcap files (100MB) to create a
argus flow file I ran into a problem. When I tried:
$> argus -r dump* -w file.argus

I got the following error:
argus[34458]: 26 Nov 10 14:29:02.394286 ArgusOpenInputPacketFile: too many
inputs max is 5

Is it possible to overcome this limitation without merging the files
manually?

Thanks,
Rafael Barbosa
http://www.vf.utwente.nl/~barbosarr/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20101129/57235018/attachment.html>


More information about the argus mailing list