pid files...
Carter Bullard
carter at qosient.com
Tue Jun 28 22:11:23 EDT 2011
Hey Russell,
I looked at pid file processing and found a bug, which I have fixed, but I'm perplexed by the support we now provide. Pid files are used for lots of things, but we've evolved ours so that it can't support a critical function. We can't use the file to provide exclusive access. I'm going to add a configuration variable, so you can specify the number of concurrent argi that can use a given interface.
Currently we support 5 concurrent argi per interface, bit it is hard coded.
Would this be helpful to you?
Carter
On Jun 27, 2011, at 7:53 PM, Carter Bullard <carter at qosient.com> wrote:
> Russell,
> Use only one argus to process both interfaces.
> Look at the new argus.conf file, in argus-3.0.4 or argus-3.0.5.4,
> and have one argus open both interfaces "ind"ependantly.
> Give them different srcid's like this:
>
> ARGUS_INTERFACE=ind:en0/192.168.0.39,en1/192.168.1.39
>
> or use two declarations
> ARGUS_INTERFACE=en0/192.168.0.39
> ARGUS_INTERFACE=en1/192.168.1.39
>
> Carter
>
> On Jun 27, 2011, at 9:40 PM, Russell Fulton wrote:
>
>>
>> On 28/06/2011, at 1:13 PM, Russell Fulton wrote:
>>
>>> Wow, long time no posts :) Yes I'm still doing things with argus -- just totally snowed under :(
>>>
>>> I am currently reworking the management of my sensors and using puppet to do all the heavy lifting and I have got the to the point that I really want to be able to specify the name of the pid file as well as the path. I could make separate directories for the various argus processors but I would much rather not.
>>>
>>> Currently I am running multiple argus processes on one interface but I am only getting one pid file argus.eth1.0.pid
>>>
>>> The two processes are spawned very close together and I suspect there is a race condition where the files are being overwritten.
>>>
>>> Google turns up a reference to a config option ARGUS-PID-FILENAME but it does not appear to be current.
>>>
>>> Have I missed something?
>>>
>>> Russell
>>>
>>> PS. running 3.0.2 if it matters....
>>
>> I tried putting a two second sleep in the script that spawns the process but it did not make any difference, the second process seems to overwrite:
>>
>> 19911 ? Ss 0:01 /usr/sbin/argus -F /home/sensors/dmzo/conf/argus-std.conf
>> 19913 ? Ss 0:01 /usr/sbin/argus -F /home/sensors/dmzo/conf/argus-user-data.conf
>> [sensors at mon263550 ~]$ ls dmzo/run/
>> argus.eth1.0.pid
>> [sensors at mon263550 ~]$ cat dmzo/run/argus.eth1.0.pid
>> 19913
>>
>> Even putting a 10 sec delay made no difference I still got just one pid file.
>>
>> Russell
>>
>>
>>
>
More information about the argus
mailing list