Argus with bonded interface

[Carter Bullard]

Well, you definitely aren't getting any packets here.  Increase the debug level to 10, and
we'll see the result of the select() calls on the bond0 interface.

Also don't use the -F /etc/argus.conf.  That is causing you to read the conf twice.
Instead, run it this way:

   /usr/local/sbin/argus -X -D10 -i bond0

The '-X' will nullify anything that was in the /etc/argus.conf file. 
Very curious.

Carter


On Sep 27, 2010, at 4:32 PM, Nate Hausrath wrote:

> Oops.  Okay, here is the output (it's large, so I put it on pastebin)
> 
> http://pastebin.com/DWrsBHKC
> 
> Thanks,
> Nate
> 
> On Sep 27, 2010, at 3:41 PM, Carter Bullard wrote:
> 
>> Hey Nate,
>> Seems that you didn't compile argus with debugging support as there should
>> be a lot of messages when using -D8.  Be sure and create the "./.debug" tag file,
>> and then perform a new "./configure;make clean;make" to generate an argus that will
>> generate debug messages.
>> 
>>    % cd /path/to/argus/distribution
>>    % touch .debug
>>    % ./configure;make clean;make
>> 
>> The "-D8" will generate messages on each packet, so hopefully that will show something.
>> 
>> Carter
>> 
>> On Sep 27, 2010, at 3:17 PM, Nate Hausrath wrote:
>> 
>>> Well, it looks like it is:
>>> 
>>> argus[4067]: 27 Sep 10 15:15:26.245870 started
>>> argus[4067]: 27 Sep 10 15:15:26.299755 ArgusGetInterfaceStatus: interface bond0 is up
>>> 
>>> Which is exactly what I get on other systems. :\
>>> 
>>> -Nate
>>> 
>>> On Sep 24, 2010, at 1:37 PM, Carter Bullard wrote:
>>> 
>>>>> /usr/local/sbin/argus -w /var/argus/argus.log.test -F /etc/argus.conf -D 8 -i bond0 - i
>>> 
>>> 
>> 
>> 
>> 
>> 





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100927/177f0edc/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100927/177f0edc/attachment.bin>