Argus with bonded interface

Carter Bullard carter at qosient.com
Mon Sep 27 17:22:49 EDT 2010


Well, you definitely aren't getting any packets here.  Increase the debug level to 10, and
we'll see the result of the select() calls on the bond0 interface.

Also don't use the -F /etc/argus.conf.  That is causing you to read the conf twice.
Instead, run it this way:

   /usr/local/sbin/argus -X -D10 -i bond0

The '-X' will nullify anything that was in the /etc/argus.conf file. 
Very curious.

Carter


On Sep 27, 2010, at 4:32 PM, Nate Hausrath wrote:

> Oops.  Okay, here is the output (it's large, so I put it on pastebin)
> 
> http://pastebin.com/DWrsBHKC
> 
> Thanks,
> Nate
> 
> On Sep 27, 2010, at 3:41 PM, Carter Bullard wrote:
> 
>> Hey Nate,
>> Seems that you didn't compile argus with debugging support as there should
>> be a lot of messages when using -D8.  Be sure and create the "./.debug" tag file,
>> and then perform a new "./configure;make clean;make" to generate an argus that will
>> generate debug messages.
>> 
>>    % cd /path/to/argus/distribution
>>    % touch .debug
>>    % ./configure;make clean;make
>> 
>> The "-D8" will generate messages on each packet, so hopefully that will show something.
>> 
>> Carter
>> 
>> On Sep 27, 2010, at 3:17 PM, Nate Hausrath wrote:
>> 
>>> Well, it looks like it is:
>>> 
>>> argus[4067]: 27 Sep 10 15:15:26.245870 started
>>> argus[4067]: 27 Sep 10 15:15:26.299755 ArgusGetInterfaceStatus: interface bond0 is up
>>> 
>>> Which is exactly what I get on other systems. :\
>>> 
>>> -Nate
>>> 
>>> On Sep 24, 2010, at 1:37 PM, Carter Bullard wrote:
>>> 
>>>>> /usr/local/sbin/argus -w /var/argus/argus.log.test -F /etc/argus.conf -D 8 -i bond0 - i
>>> 
>>> 
>> 
>> 
>> 
>> 





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100927/177f0edc/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100927/177f0edc/attachment.bin>


More information about the argus mailing list