Argus w/ napatech libpcap
Carter Bullard
carter at qosient.com
Mon Jul 16 10:16:08 EDT 2012
Hey Aleksander,
Sorry for the delay, I was hoping that you had figured it out.
The problem is that we think there is something to do, but
there aren't any open pcap interfaces, at least that is what it looks like.
Need to test a few variables to see what is going on.
When you get to line 3733 in the routine ArgusGetPackets(), what is
the value of src->ArgusInterface[i].ArgusPd, and what is the value of
fd when we're done. If you don't mind, running in gdb again, when it
breaks in ArgusGetPackets(), 'n'ext until line 3733, and then:
(gdb) n
3733 if (src->ArgusInterface[i].ArgusPd && (fd =pcap_fileno(src->ArgusInterface[i].ArgusPd) >= 0)) {
(gdb) print i
(gdb) print src->ArgusInterface[i].ArgusPd
(gdb) n
(gdb) print fd
This will help a great deal.
Sorry for the delay again, and sorry for any inconvenience,
Carter
On Jun 28, 2012, at 12:12 AM, Aleksander wrote:
> OK, hope I got this right. Please let me know what other GDB
> commands to run or output to collect. Thanks again.
>
> GDB output:
>
> $ sudo gdb sbin/argus
> GNU gdb (GDB) Red Hat Enterprise Linux (7.2-56.el6)
> Copyright (C) 2010 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law. Type "show copying"
> and "show warranty" for details.
> This GDB was configured as "x86_64-redhat-linux-gnu".
> For bug reporting instructions, please see:
> <http://www.gnu.org/software/gdb/bugs/>...
> Reading symbols from /opt/argus/sbin/argus...done.
> (gdb) break ArgusSource.c:3710
> Breakpoint 1 at 0x41d291: file ArgusSource.c, line 3710.
>
> (gdb) run -Xi nap2 -P 13579
> Starting program: /opt/argus/sbin/argus -Xi nap2 -P 13579
> [Thread debugging using libthread_db enabled]
> argus[25787]: NT_Init: shmem_hbseg_fifo: expected signature:
> version=17236 magic=2a0102a2 size=4644880
> argus[25787]: NT_Init: shmem_hbseg_fifo: actual signature..:
> version=17236 magic=2a0102a2 size=4644880
> [New Thread 0x7fff7fbff700 (LWP 25792)]
> [New Thread 0x7fff7f1fe700 (LWP 25793)]
> argus[25787]: 27 Jun 12 22:48:41.206047 started
> [New Thread 0x7fff7e3f2700 (LWP 25798)]
> [Switching to Thread 0x7fff7e3f2700 (LWP 25798)]
>
> Breakpoint 1, ArgusGetPackets (arg=0x7fff7e3f3010) at ArgusSource.c:3710
> 3710 if ((src->ArgusInterface[0].ArgusPd) ||
> (src->ArgusInterface[0].ArgusPcap.fd)) {
> Missing separate debuginfos, use: debuginfo-install
> glibc-2.12-1.80.el6.x86_64 zlib-1.2.3-27.el6.x86_64
>
> (gdb) n
> 3711 int found = 0, up = 0;
> (gdb) n
> 3713 switch (src->ArgusInterface[0].ArgusInterfaceType) {
> (gdb) n
> 3732 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3733 if (src->ArgusInterface[i].ArgusPd && (fd =
> pcap_fileno(src->ArgusInterface[i].ArgusPd) >= 0)) {
> (gdb) n
> 3751 setArgusInterfaceStatus(src, 0);
> (gdb) n
> 3732 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3754 if (!(src->ArgusReadingOffLine)) {
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
> (gdb) n
> 3773 if (notselectable) {
> (gdb) n
> 3817 if (up && ((tmp = select (width + 1,
> &ArgusReadMask, NULL, NULL, &wait)) >= 0)) {
> (gdb) n
> 3913 gettimeofday
> (&src->ArgusModel->ArgusGlobalTime, NULL);
> (gdb) n
> 3917 ArgusModel->ArgusGlobalTime =
> src->ArgusModel->ArgusGlobalTime;
> (gdb) n
> 3918 if (up) {
> (gdb) n
> 3923 struct timespec tsbuf = {0,
> 150000000}, *ts = &tsbuf;
> (gdb) n
> 3925 ArgusDebug (5, "ArgusGetPackets: no
> interfaces up: sleeping\n");
> (gdb) n
> 3927 nanosleep(ts, NULL);
> (gdb) n
> 3930 width = 0;
> (gdb) n
> 3931 found = 0;
> (gdb) n
> 3932 up = 0;
> (gdb) n
> 3933 FD_ZERO(&ArgusReadMask);
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3936 if (src->ArgusInterface[i].ArgusPd &&
> ((fd = pcap_fileno(src->ArgusInterface[i].ArgusPd)) >= 0)) {
> (gdb) n
> 3948 fds[i] = -1;
> (gdb) n
> 3949 ArgusOpenInterface(src, NULL,
> &src->ArgusInterface[i]);
> (gdb) n
> 3950 found++;
> (gdb) n
> 3935 for (i = 0; i < src->ArgusInterfaces; i++) {
> (gdb) n
> 3954 wait.tv_sec = 0; wait.tv_usec = 200000;
> (gdb) n
> 3957 if (ArgusUpdateTime (src->ArgusModel)) {
> (gdb) n
> 3958 ArgusGetInterfaceStatus(src);
> (gdb) n
> 3959 ArgusQueueManager(src->ArgusModel);
> (gdb) n
> 3965 } while (noerror && (src->eNflag != 0) &&
> (!(ArgusShutDownStarted)));
>
>
>
>
> On Tue, Jun 26, 2012 at 10:39 AM, Carter Bullard <carter at qosient.com> wrote:
>> OK, well you are setting the interface status correctly, but in a previous debug listing
>> your argus does say that there are no interfaces that are up, and you are not printing
>> a critical output string that states that nap2 is " up ".
>>
>> If you don't mind doing some more gdb(), once past the loop, that sets all the fds to -1,
>> we need to find out what the issue is opening the interface, and then declaring that
>> all is good.
>>
>> Instead of breaking at the beginning of ArgusGetPackets, lets break just after the
>> ARGUS_MAXINTERFACE loop on line 3710, to see what its going to do.
>>
>> % sudo -gdb sbin/argus
>> (gdb) l ArgusGetPackets
>>
>> assuming that in your code line 3710 looks like this:
>>
>> (gdb) l 3710
>> 3705 #endif
>> 3706
>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>> 3708 fds[i] = -1;
>> 3709
>> 3710 if ((src->ArgusInterface[0].ArgusPd) || (src->ArgusInterface[0].ArgusPcap.fd)) {
>> 3711 int found = 0, up = 0;
>> 3712
>> 3713 switch (src->ArgusInterface[0].ArgusInterfaceType) {
>> 3714 case ARGUSERFPKTFILE: {
>>
>> (gdb) break 3710
>> (gdb) run -Xi nap2 -P 13579
>>
>> then just type 'n' for awhile to see what it does:
>> Thanks for all the help !!!!!!
>>
>> Carter
>>
>>
>> On Jun 26, 2012, at 4:40 AM, Aleksander wrote:
>>
>>> Hi Carter,
>>>
>>>
>>>> Sorry for the delayed response.
>>> No problem at all, thank you for the taking the time to assist.
>>>
>>>> A couple of things that will help. In your ./include/argus_config.h, is HAVE_PCAP_GET_SELECTABLE_FD defined?
>>>
>>> The argus_config.h shows:
>>> "#define HAVE_PCAP_GET_SELECTABLE_FD 1"
>>>
>>>> Do you know if the Napatech card is selectable?
>>> I'm still working on this, but I've not been able to confirm one way
>>> or the other. I have a high level understanding of "select" and my C
>>> is poor, so I've not been able to figure out a reliable way to test if
>>> it is selectable or not yet...
>>>
>>> I've noticed that the napatech interfaces are not discoverable with
>>> the usual Linux utilities, instead I use a Napatech config file and
>>> napatech's scripting language to configure the cards, so no ifcfg-nap2
>>> file. At the moment, the only reliable way to discover the napatech
>>> virtual interfaces is by running "tcpdump -D" command.
>>>
>>>
>>> Here is the GDB output:
>>>
>>> $ sudo gdb sbin/argus
>>> GNU gdb (GDB) Red Hat Enterprise Linux (7.2-56.el6)
>>> Copyright (C) 2010 Free Software Foundation, Inc.
>>> License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
>>> This is free software: you are free to change and redistribute it.
>>> There is NO WARRANTY, to the extent permitted by law. Type "show copying"
>>> and "show warranty" for details.
>>> This GDB was configured as "x86_64-redhat-linux-gnu".
>>> For bug reporting instructions, please see:
>>> <http://www.gnu.org/software/gdb/bugs/>...
>>> Reading symbols from /opt/argus/sbin/argus...done.
>>> (gdb) break ArgusGetPackets
>>> Breakpoint 1 at 0x41d131: file ArgusSource.c, line 3666.
>>> (gdb) run -Xi nap2 -P 13579
>>> Starting program: /opt/argus/sbin/argus -Xi nap2 -P 13579
>>> [Thread debugging using libthread_db enabled]
>>> argus[7132]: NT_Init: shmem_hbseg_fifo: expected signature:
>>> version=17236 magic=2a0102a2 size=4644880
>>> argus[7132]: NT_Init: shmem_hbseg_fifo: actual signature..:
>>> version=17236 magic=2a0102a2 size=4644880
>>> [New Thread 0x7fff7ebff700 (LWP 7137)]
>>> [New Thread 0x7fff7e1fe700 (LWP 7138)]
>>> argus[7132]: 25 Jun 12 17:26:34.388102 started
>>> [New Thread 0x7fff7d3f2700 (LWP 7143)]
>>> [Switching to Thread 0x7fff7d3f2700 (LWP 7143)]
>>>
>>> Breakpoint 1, ArgusGetPackets (arg=0x7fff7d3f3010) at ArgusSource.c:3666
>>> 3666 void *retn = NULL;
>>>
>>> (gdb) where
>>> #0 ArgusGetPackets (arg=0x7fff7d3f3010) at ArgusSource.c:3666
>>> #1 0x00007fffc6aff851 in start_thread () from /lib64/libpthread.so.0
>>> #2 0x00007fffc65c967d in clone () from /lib64/libc.so.6
>>> (gdb) n
>>> 3667 struct ArgusSourceStruct *src = arg;
>>> (gdb) n
>>> 3669 int noerror = 1;
>>> (gdb) n
>>> 3672 int tmp, width = 0, fd;
>>> (gdb) n
>>> 3675 int notselectable = 0;
>>> (gdb) n
>>> 3681 sigfillset(&blocked_signals);
>>> (gdb) n
>>> 3682 pthread_sigmask(SIG_BLOCK, &blocked_signals, NULL);
>>> (gdb) n
>>> 3685 if (src != NULL) {
>>> (gdb) n
>>> 3687 ArgusDebug (2, "ArgusGetPackets (%p) starting\n", src);
>>> (gdb) n
>>> 3693 signal (SIGPIPE, SIG_IGN);
>>> (gdb) n
>>> 3695 FD_ZERO(&ArgusReadMask);
>>> (gdb) n
>>> 3696 FD_ZERO(&ArgusWriteMask);
>>> (gdb) n
>>> 3697 FD_ZERO(&ArgusExceptMask);
>>> (gdb) n
>>> 3699 wait.tv_sec = 0; wait.tv_usec = 200000;
>>> (gdb) n
>>> 3701 ArgusGetInterfaceStatus(src);
>>> (gdb) s
>>> ArgusGetInterfaceStatus (src=0x7fff7d3f3010) at ArgusSource.c:4166
>>> 4166 struct ArgusDeviceStruct *device = NULL;
>>> (gdb) n
>>> 4173 if (ArgusShutDownFlag) {
>>> (gdb)
>>> 4178 if (src && src->ArgusDeviceList)
>>> (gdb)
>>> 4179 if ((device = (struct ArgusDeviceStruct *)
>>> ArgusPopFrontList(src->ArgusDeviceList, ARGUS_LOCK)) != NULL)
>>> (gdb)
>>> 4180 ArgusPushFrontList(src->ArgusDeviceList, (struct
>>> ArgusListRecord *) device, ARGUS_LOCK);
>>> (gdb)
>>> 4182 if (device == NULL)
>>> (gdb)
>>> 4185 if (strstr(device->name, "dag") || strstr(device->name, "nap")) {
>>> (gdb)
>>> 4186 for (i = 0; i < src->ArgusInterfaces; i++) {
>>> (gdb)
>>> 4187 if (src->ArgusInterface[i].ArgusPd &&
>>> (pcap_fileno(src->ArgusInterface[i].ArgusPd) > 0))
>>> (gdb)
>>> 4190 src->ArgusInterface[i].ifr.ifr_flags |= IFF_UP;
>>> (gdb)
>>> 4191 setArgusInterfaceStatus(src, 1);
>>> (gdb)
>>> 4186 for (i = 0; i < src->ArgusInterfaces; i++) {
>>> (gdb)
>>> 4193 return;
>>> (gdb)
>>> 4250 }
>>> (gdb)
>>> ArgusGetPackets (arg=0x7fff7d3f3010) at ArgusSource.c:3702
>>> 3702 gettimeofday (&src->ArgusStartTime, 0L);
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>> (gdb)
>>> 3707 for (i = 0; i < ARGUS_MAXINTERFACE; i++)
>>> (gdb)
>>> 3708 fds[i] = -1;
>>>
>>>
>>>
>>>
>>>
>>> On Mon, Jun 25, 2012 at 9:52 AM, Carter Bullard <carter at qosient.com> wrote:
>>>> Hey Aleksander,
>>>> Sorry for the delayed response. Looks like your still getting the "no interfaces up" message, but it also looks like your opening the interface twice.
>>>> So, this may take a bit of effort to debug. We can bypass the " up " part by modifying the code to just say its up.
>>>> That maybe the preferred strategy, to see if that is the problem.
>>>>
>>>> A couple of things that will help. In your ./include/argus_config.h, is HAVE_PCAP_GET_SELECTABLE_FD defined?
>>>> Do you know if the Napatech card is selectable?
>>>>
>>>> To figure this out whole thing out, we will need to run argus under gdb() in order to trace what its doing.
>>>> If you are familiar with gdb(), configure() and compile argus with these tag files in the root directory, .devel, .debug.
>>>> % touch .devel .debug
>>>> % make clobber
>>>> % ./configure;make
>>>>
>>>> Then with your enabled argus:
>>>>
>>>> % gdb bin/argus
>>>> GNU gdb 6.3.50-20050815 (Apple version gdb-1705) (Fri Jul 1 10:50:06 UTC 2011)
>>>> Copyright 2004 Free Software Foundation, Inc.
>>>> GDB is free software, covered by the GNU General Public License, and you are
>>>> welcome to change it and/or distribute copies of it under certain conditions.
>>>> Type "show copying" to see the conditions.
>>>> There is absolutely no warranty for GDB. Type "show warranty" for details.
>>>> This GDB was configured as "x86_64-apple-darwin"...Reading symbols for shared libraries ..... done
>>>>
>>>> (gdb) break ArgusGetPackets
>>>> Breakpoint 1 at 0x100020a32: file ArgusSource.c, line 3666.
>>>>
>>>> (gdb) run -Xi nap2 -P 13579
>>>> Starting program: /Volumes/Users/carter/argus/release/argus-3.0.6/argus/bin/argus -Xi en0 -P 13579
>>>> Reading symbols for shared libraries ++++........................ done
>>>> Jun 25 10:44:37 thoth.newyork.qosient.com argus[10751] <Warning>: 25 Jun 12 10:44:37.292623 started
>>>> [Switching to process 10751 thread 0x1903]
>>>>
>>>> Breakpoint 1, ArgusGetPackets (arg=0x101183000) at ArgusSource.c:3666
>>>> 3666 void *retn = NULL;
>>>> (gdb) where
>>>> #0 ArgusGetPackets (arg=0x101183000) at ArgusSource.c:3666
>>>> #1 0x00007fff80eec8bf in _pthread_start ()
>>>> #2 0x00007fff80eefb75 in thread_start ()
>>>>
>>>>
>>>> Then, if you don't mind, just type 'n' and carriage return. This will step through the program.
>>>> Type carriage return about 8 times, and when you get to line 3701, type 's' carriage return,
>>>> that will cause gdb to step into the routine ArgusGetInterfaceStatus().
>>>>
>>>> (gdb) n
>>>> ……
>>>> (gdb)
>>>> 3701 ArgusGetInterfaceStatus(src);
>>>> (gdb) s
>>>> ArgusGetInterfaceStatus (src=0x101183000) at ArgusSource.c:4166
>>>> 4166 struct ArgusDeviceStruct *device = NULL;
>>>>
>>>> Then resume the 'n' carriage return.
>>>> (gdb) n
>>>> 4173 if (ArgusShutDownFlag) {
>>>>
>>>> Hit carriage return a few times, so we can see why it doesn't think the interface is up.
>>>>
>>>> Carter
>>>>
>>>> On Jun 21, 2012, at 10:10 PM, Aleksander wrote:
>>>>
>>>>> Hi Carter,
>>>>>
>>>>> My apologies, I must have used the stable version by mistake.
>>>>> This time around I have double-checked to make sure that all previous
>>>>> argus installs/traces were removed and have conducted the tests
>>>>> mentioned in my previous email again.
>>>>>
>>>>> I have compiled tcpdump versions 4.1.1 and 4.3.0 against the
>>>>> Napatech library, and have been able to capture packets with the tools
>>>>> on napatech virtual interfaces.
>>>>>
>>>>> Here's the debug output from running argus v3.0.6.1 on a virtual
>>>>> napatech interface. The patch you recommended was already there, so I
>>>>> left ArgusSource.c intact.
>>>>>
>>>>> $ sudo argus -D 6 -i nap2 -w /tmp/out2.argus
>>>>>
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728103 ArgusCalloc
>>>>> (1, 3144) returning 0x1935010
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728222
>>>>> ArgusNewModeler() returning 0x1935010
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728240 ArgusCalloc
>>>>> (1, 4237248) returning 0x7fcf8492b010
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728254
>>>>> ArgusNewSource(0x1935010) returning 0x7fcf8492b010
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728268 ArgusCalloc
>>>>> (1, 312) returning 0x1935d40
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728279 ArgusCalloc
>>>>> (1, 152) returning 0x19367b0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728286 ArgusNewQueue
>>>>> () returning 0x19367b0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728297 ArgusCalloc
>>>>> (1, 152) returning 0x1936850
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728305 ArgusNewList
>>>>> () returning 0x1936850
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728313 ArgusCalloc
>>>>> (1, 152) returning 0x19368f0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728320 ArgusNewList
>>>>> () returning 0x19368f0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728327
>>>>> ArgusNewOutput() returning retn 0x1935d40
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728344
>>>>> setArgusMarReportInterval(60) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728372
>>>>> clearArgusDevice(0x7fcf8492b010) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728386 ArgusCalloc
>>>>> (1, 152) returning 0x1936990
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728395 ArgusNewList
>>>>> () returning 0x1936990
>>>>> argus[6621]: NT_Init: shmem_hbseg_fifo: expected signature:
>>>>> version=17236 magic=2a0102a2 size=4644880
>>>>> argus[6621]: NT_Init: shmem_hbseg_fifo: actual signature..:
>>>>> version=17236 magic=2a0102a2 size=4644880
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193239 ArgusCalloc
>>>>> (1, 64) returning 0x19371a0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193275
>>>>> ArgusPushFrontList (0x1936990, 0x19371a0, 1) returning 0x19dd
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193290
>>>>> setArgusDevice(nap2 ) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193305
>>>>> ArgusDeleteList ((nil), 2) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193315 ArgusCalloc
>>>>> (1, 152) returning 0x1937210
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193324 ArgusNewList
>>>>> () returning 0x1937210
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193331 ArgusCalloc
>>>>> (1, 24) returning 0x1935ea0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193339
>>>>> ArgusPushFrontList (0x1937210, 0x1935ea0, 1) returning 0x19dd
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193348
>>>>> setArgusInterfaceStatus(0x7fcf8492b010, 1)
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193791 ArgusCalloc
>>>>> (1, 592056) returning 0x1b3ef90
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205449 ArgusCalloc
>>>>> (1, 128) returning 0x1c78270
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205475
>>>>> ArgusGenerateInitialMar() returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205485 ArgusCalloc
>>>>> (1, 168) returning 0x1c78300
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205604 ArgusCalloc
>>>>> (1, 262256) returning 0x1c783b0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205615 ArgusCalloc
>>>>> (1, 152) returning 0x1cb8430
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205622 ArgusNewList
>>>>> () returning 0x1cb8430
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205632 ArgusNewSocket
>>>>> (8) returning 0x1c783b0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205672
>>>>> ArgusPushBackList (0x1937210, 0x1935ea0, 1) returning 1
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205682
>>>>> ArgusDeleteList (0x1937210, 2) 1 items on list
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205690 ArgusFree (0x1935ea0)
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205703 ArgusFree (0x1937210)
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205711
>>>>> ArgusDeleteList (0x1937210, 2) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205788 ArgusInitOutput() done
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.205804
>>>>> ArgusOutputProcess(0x1935d40) starting
>>>>> argus[6621]: 21 Jun 12 20:37:46.205817 started
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.205852
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.205863
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205882 ArgusCalloc
>>>>> (1, 4237248) returning 0x7fcf3c7f3010
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205895 ArgusCalloc
>>>>> (1, 152) returning 0x1937210
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205903 ArgusNewList
>>>>> () returning 0x1937210
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205916
>>>>> ArgusCloneSource(0x7fcf8492b010) returning 0x7fcf3c7f3010
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205926
>>>>> clearArgusDevice(0x7fcf3c7f3010) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205934
>>>>> ArgusPushBackList (0x1937210, 0x19371a0, 1) returning 1
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.209754
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x1cb8610
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211698
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211709
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211717
>>>>> ArgusPushBackList (0x1937210, 0x19371a0, 1) returning 1
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211773 ArgusCalloc
>>>>> (1, 3144) returning 0x1cb8970
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211788 ArgusCalloc
>>>>> (1, 64) returning 0x1cb95c0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211902 ArgusCalloc
>>>>> (65536, 8) returning 0x1cb9610
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211911
>>>>> ArgusNewHashTable (65536) returning 0x1cb95c0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211920 ArgusCalloc
>>>>> (1, 104) returning 0x1d39620
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211927 ArgusCalloc
>>>>> (1, 152) returning 0x1d39690
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211935 ArgusNewQueue
>>>>> () returning 0x1d39690
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211942 ArgusCalloc
>>>>> (1, 152) returning 0x1d39730
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211949 ArgusNewQueue
>>>>> () returning 0x1d39730
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211956 ArgusCalloc
>>>>> (1, 112) returning 0x1d397d0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211964 ArgusCalloc
>>>>> (1, 40) returning 0x1d39850
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211972 ArgusCalloc
>>>>> (1, 80) returning 0x1d39880
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211980 ArgusCalloc
>>>>> (1, 1096) returning 0x1d398e0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211991 ArgusCalloc
>>>>> (1, 1096) returning 0x1d39d30
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211999 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3a180
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212007 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3a5d0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212015 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3aa20
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212025 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3ae70
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212034 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3b2c0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212041 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3b710
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212049 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3bb60
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212060 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3bfb0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212069 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3c400
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212077 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3c850
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212088 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3cca0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212097 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3d0f0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212105 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3d540
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212112 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3d990
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212123 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3dde0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212132 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3e230
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212140 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3e680
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212148 ArgusCalloc
>>>>> (1, 1096) returning 0x1d3ead0
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212155
>>>>> ArgusInitMallocList (1048) returning
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212162
>>>>> ArgusInitModeler(0x1cb8970) done
>>>>> argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212170
>>>>> ArgusInitSource(0x7fcf3c7f3010) returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212231
>>>>> ArgusGetPackets (0x7fcf3c7f3010) starting
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212253
>>>>> ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212269
>>>>> setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212278
>>>>> setArgusInterfaceStatus(0x7fcf3c7f3010, 0)
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212286
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305921
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305933
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305941
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305948
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.362414
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf340008c0
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364179
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364191
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364200
>>>>> ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364209
>>>>> setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364220
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406010
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406020
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406028
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406035
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506107
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506118
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506125
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506132
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.514290
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34000c40
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.516044
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.516055
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.516063
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606197
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606208
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606215
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606222
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.666144
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34000fc0
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667926
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667937
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667945
>>>>> ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667954
>>>>> setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667961
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706283
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706293
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706301
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706307
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806364
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806375
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806383
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806389
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.818030
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34001340
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819786
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819797
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819805
>>>>> ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819814
>>>>> setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819821
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906457
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906468
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906475
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906482
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.969896
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf340016c0
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971650
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971661
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971670
>>>>> ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971678
>>>>> setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971686
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006541
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006552
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006560
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006566
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106631
>>>>> ArgusOutputProcess() checking out clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106642
>>>>> ArgusOutputProcess() done with clients
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106649
>>>>> ArgusOutputProcess() looping
>>>>> argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106656
>>>>> ArgusOutputProcess() waiting for input list
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.121755
>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34001a40
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.123523
>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.123534
>>>>> ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
>>>>> argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.123543
>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>>
>>>>> <snip>
>>>>>
>>>>>
>>>>> On Thu, Jun 21, 2012 at 9:43 AM, Carter Bullard <carter at qosient.com> wrote:
>>>>>> Hey Aleksander,
>>>>>> Your debug output is inconsistent with the latest argus-3.0.6.1 release code.
>>>>>> If you haven't recently downloaded the newest code, grab it from the server
>>>>>>
>>>>>> http://qosient.com/argus/src/argus-3.0.6.1.tar.gz
>>>>>>
>>>>>> You said that vanilla tcpdump, compiled against the napatech libpcap works?
>>>>>> We try to do just what tcpdump() does, just for this reason. What version
>>>>>> of tcpdump are you using?
>>>>>>
>>>>>> Carter
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Jun 21, 2012, at 1:32 AM, Aleksander wrote:
>>>>>>
>>>>>>> Hi Carter,
>>>>>>>
>>>>>>> Thanks for patch and the quick response. I am using a new card
>>>>>>> with the latest drivers (3GD). I applied the patch, but it didn't
>>>>>>> seem to help. I added "nap" as you directed, and also tried adding
>>>>>>> the full interface name as well, but no luck. I tried renaming the
>>>>>>> virtual interface to "dag" just for kicks, but it didn't seem to make
>>>>>>> any difference. If I use Argus compiled with the Napatech libpcap
>>>>>>> against a non-Napatech interface (eth0), it does capture packets.
>>>>>>>
>>>>>>> Here's the debug output from my last failed attempt:
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966058 ArgusCalloc
>>>>>>> (1, 3144) returning 0xcda010
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966183
>>>>>>> ArgusNewModeler() returning 0xcda010
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966202 ArgusCalloc
>>>>>>> (1, 4237248) returning 0x7f5f11f65010
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966217
>>>>>>> ArgusNewSource(0xcda010) returning 0x7f5f11f65010
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966232 ArgusCalloc
>>>>>>> (1, 312) returning 0xcdad40
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966242 ArgusCalloc
>>>>>>> (1, 152) returning 0xcdb7b0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966250 ArgusNewQueue
>>>>>>> () returning 0xcdb7b0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966261 ArgusCalloc
>>>>>>> (1, 152) returning 0xcdb850
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966269 ArgusNewList
>>>>>>> () returning 0xcdb850
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966277 ArgusCalloc
>>>>>>> (1, 152) returning 0xcdb8f0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966284 ArgusNewList
>>>>>>> () returning 0xcdb8f0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966291
>>>>>>> ArgusNewOutput() returning retn 0xcdad40
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966309
>>>>>>> setArgusMarReportInterval(60) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966338
>>>>>>> clearArgusDevice(0x7f5f11f65010) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966352 ArgusCalloc
>>>>>>> (1, 152) returning 0xcdb990
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966360 ArgusNewList
>>>>>>> () returning 0xcdb990
>>>>>>> argus[14758]: NT_Init: shmem_hbseg_fifo: expected signature:
>>>>>>> version=17236 magic=2a0102a2 size=4644880
>>>>>>> argus[14758]: NT_Init: shmem_hbseg_fifo: actual signature..:
>>>>>>> version=17236 magic=2a0102a2 size=4644880
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428706 ArgusCalloc
>>>>>>> (1, 64) returning 0xcdc1a0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428728
>>>>>>> ArgusPushFrontList (0xcdb990, 0xcdc1a0, 1) returning 0x39a6
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428748
>>>>>>> setArgusDevice(nap2 ) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428763
>>>>>>> ArgusDeleteList ((nil), 2) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428773 ArgusCalloc
>>>>>>> (1, 152) returning 0xcdc210
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428781 ArgusNewList
>>>>>>> () returning 0xcdc210
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428789 ArgusCalloc
>>>>>>> (1, 24) returning 0xcdaea0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428797
>>>>>>> ArgusPushFrontList (0xcdc210, 0xcdaea0, 1) returning 0x39a6
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428806
>>>>>>> setArgusInterfaceStatus(0x7f5f11f65010, 1)
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.429295 ArgusCalloc
>>>>>>> (1, 592056) returning 0xee3f90
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440846 ArgusCalloc
>>>>>>> (1, 128) returning 0x101d270
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440862
>>>>>>> getArgusID(0x7f5f11f65010) done
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440870
>>>>>>> getArgusIDType(0x7f5f11f65010) done
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440887
>>>>>>> ArgusGenerateInitialMar() returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440896
>>>>>>> ArgusPopFrontList (0xcdaea0) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440904 ArgusCalloc
>>>>>>> (1, 168) returning 0x101d300
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441016 ArgusCalloc
>>>>>>> (1, 262256) returning 0x101d3b0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441026 ArgusCalloc
>>>>>>> (1, 152) returning 0x105d430
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441034 ArgusNewList
>>>>>>> () returning 0x105d430
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441043
>>>>>>> ArgusNewSocket (8) returning 0x101d3b0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441095
>>>>>>> ArgusAddToQueue (0xcdb7b0, 0x101d300) returning 1
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441107
>>>>>>> ArgusPushBackList (0xcdc210, 0xcdaea0, 1) returning 1
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441116
>>>>>>> ArgusDeleteList (0xcdc210, 2) 1 items on list
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441123
>>>>>>> ArgusPopFrontList (0xcdaea0) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441131 ArgusFree (0xcdaea0)
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441144 ArgusFree (0xcdc210)
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441155
>>>>>>> ArgusDeleteList (0xcdc210, 2) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441222 ArgusInitOutput() done
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.441243
>>>>>>> ArgusOutputProcess(0xcdad40) starting
>>>>>>> argus[14758]: 21 Jun 12 00:11:18.441253 started
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.441292
>>>>>>> ArgusOutputProcess() looping
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.441311
>>>>>>> ArgusOutputProcess() waiting for input list
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441300
>>>>>>> ArgusPopFrontList (0xcdc1a0) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441365 ArgusCalloc
>>>>>>> (1, 4237248) returning 0x7f5ec9ff3010
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441376 ArgusCalloc
>>>>>>> (1, 152) returning 0xcdc210
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441384 ArgusNewList
>>>>>>> () returning 0xcdc210
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441400
>>>>>>> ArgusCloneSource(0x7f5f11f65010) returning 0x7f5ec9ff3010
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441411
>>>>>>> ArgusPopFrontList ((nil)) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441419
>>>>>>> clearArgusDevice(0x7f5ec9ff3010) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441427
>>>>>>> ArgusPushBackList (0xcdc210, 0xcdc1a0, 1) returning 1
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.445094
>>>>>>> ArgusPopFrontList (0xcdc1a0) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.445143
>>>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x105d610
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447355
>>>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447370
>>>>>>> ArgusOpenInterface(0x7f5ec9ff3010, 'nap2') returning 1
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447379
>>>>>>> ArgusPushBackList (0xcdc210, 0xcdc1a0, 1) returning 1
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447433 ArgusCalloc
>>>>>>> (1, 3144) returning 0x105d970
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447449 ArgusCalloc
>>>>>>> (1, 64) returning 0x105e5c0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447544 ArgusCalloc
>>>>>>> (65536, 8) returning 0x105e610
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447554
>>>>>>> ArgusNewHashTable (65536) returning 0x105e5c0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447562 ArgusCalloc
>>>>>>> (1, 104) returning 0x10de620
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447570 ArgusCalloc
>>>>>>> (1, 152) returning 0x10de690
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447577 ArgusNewQueue
>>>>>>> () returning 0x10de690
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447585 ArgusCalloc
>>>>>>> (1, 152) returning 0x10de730
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447592 ArgusNewQueue
>>>>>>> () returning 0x10de730
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447599 ArgusCalloc
>>>>>>> (1, 112) returning 0x10de7d0
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447607 ArgusCalloc
>>>>>>> (1, 40) returning 0x10de850
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447615 ArgusCalloc
>>>>>>> (1, 80) returning 0x10de880
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447623 ArgusCalloc
>>>>>>> (1, 1096) returning 0x10de8e0
>>>>>>> <repeats 20 times>
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447796
>>>>>>> ArgusInitMallocList (1048) returning
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447803
>>>>>>> ArgusInitModeler(0x105d970) done
>>>>>>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447811
>>>>>>> ArgusInitSource(0x7f5ec9ff3010) returning 1
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447878
>>>>>>> ArgusGetPackets (0x7f5ec9ff3010) starting
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447903
>>>>>>> ArgusPopFrontList (0xcdc1a0) returning
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447912
>>>>>>> ArgusPushFrontList (0xcdc210, 0xcdc1a0, 1) returning 0x39af
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447925
>>>>>>> setArgusInterfaceStatus(0x7f5ec9ff3010, 1)
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447934
>>>>>>> setArgusInterfaceStatus(0x7f5ec9ff3010, 0)
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447942
>>>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541368
>>>>>>> ArgusOutputStatusTime(0xcdad40) done
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541380
>>>>>>> ArgusOutputProcess() checking out clients
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541388
>>>>>>> ArgusOutputProcess() done with clients
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541395
>>>>>>> ArgusOutputProcess() looping
>>>>>>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541402
>>>>>>> ArgusOutputProcess() waiting for input list
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.598057
>>>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7f5ec40008c0
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600281
>>>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600295
>>>>>>> ArgusOpenInterface(0x7f5ec9ff3010, 'nap2') returning 1
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600305
>>>>>>> ArgusUpdateTime (0x105d970) global time 1340255478.447941 update
>>>>>>> 1340255478.647941 returning 1
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600314
>>>>>>> ArgusPopFrontList (0xcdc1a0) returning
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600321
>>>>>>> ArgusPushFrontList (0xcdc210, 0xcdc1a0, 1) returning 0x39af
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600329
>>>>>>> setArgusInterfaceStatus(0x7f5ec9ff3010, 1)
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600340
>>>>>>> ArgusProcessQueueTimeout(0x105d970, 0x10de690) done with 0 records
>>>>>>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600349
>>>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>>>> `
>>>>>>>
>>>>>>>
>>>>>>> On Wed, Jun 20, 2012 at 8:14 AM, Carter Bullard <carter at qosient.com> wrote:
>>>>>>>> Hey Aleksander,
>>>>>>>> This debug message may be the one to pay attention to.
>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679550 ArgusGetPackets: no interfaces up: sleeping
>>>>>>>>
>>>>>>>> If argus doesn't think any interfaces are up, it won't try to read any packets.
>>>>>>>> For DAG cards, we have to put in special code to fool it into thinking that the
>>>>>>>> interface is up. We may have to do the same thing with Napatech cards.
>>>>>>>>
>>>>>>>> Is this a new card ?
>>>>>>>>
>>>>>>>> If you are willing to be a guinea pig, try adding this patch to ./argus/ArgusSource.c.
>>>>>>>>
>>>>>>>> ==== //depot/argus-3.0.6/argus/argus/ArgusSource.c#2 - /Volumes/Users/carter/argus/release/argus-3.0.6/argus/argus/ArgusSource.c ====
>>>>>>>> ***************
>>>>>>>> *** 4182,4188 ****
>>>>>>>> if (device == NULL)
>>>>>>>> return;
>>>>>>>>
>>>>>>>> ! if (strstr(device->name, "dag")) {
>>>>>>>> for (i = 0; i < src->ArgusInterfaces; i++) {
>>>>>>>> if (src->ArgusInterface[i].ArgusPd && (pcap_fileno(src->ArgusInterface[i].ArgusPd) > 0))
>>>>>>>> bzero ((char *)&src->ArgusInterface[i].ifr, sizeof(ifr));
>>>>>>>> --- 4182,4188 ----
>>>>>>>> if (device == NULL)
>>>>>>>> return;
>>>>>>>>
>>>>>>>> ! if (strstr(device->name, "dag") || strstr(device->name, "nap")) {
>>>>>>>> for (i = 0; i < src->ArgusInterfaces; i++) {
>>>>>>>> if (src->ArgusInterface[i].ArgusPd && (pcap_fileno(src->ArgusInterface[i].ArgusPd) > 0))
>>>>>>>> bzero ((char *)&src->ArgusInterface[i].ifr, sizeof(ifr));
>>>>>>>>
>>>>>>>> This should get you past the idle interface problem.
>>>>>>>> Send email if that helps, and I'll add it to the main code base.
>>>>>>>>
>>>>>>>> Carter
>>>>>>>>
>>>>>>>>
>>>>>>>> On Jun 20, 2012, at 12:45 AM, Aleksander wrote:
>>>>>>>>
>>>>>>>>> Over the past few days I have been working with a Napatech 1G card.
>>>>>>>>> For the most part I’ve been successful at getting the card to create
>>>>>>>>> virtual interfaces and sniff traffic with tcpdump and snort. However,
>>>>>>>>> I’ve not been able to figure out why Argus is not able to process
>>>>>>>>> packets from the Napatech virtual interface… Argus appears to run
>>>>>>>>> without crashing (non-demon mode), but I’m not able to generate any
>>>>>>>>> flows. If I capture packets with tcpdump, and later read the pcap
>>>>>>>>> with Argus, I am able to generate flows. Any hints or assistance you
>>>>>>>>> can provide would be greatly appreciated.
>>>>>>>>>
>>>>>>>>> Environment:
>>>>>>>>> RHEL 6.2 x86_64
>>>>>>>>> Vendor modified libpcap-1.1.1
>>>>>>>>> Argus v3.0.6.1
>>>>>>>>>
>>>>>>>>> Here’s how I’ve compiled argus: $ ./configure –with-libpcap=/opt/vendordir
>>>>>>>>>
>>>>>>>>> This debug entry seems interesting, but I’m not sure what to do next:
>>>>>>>>> “ArgusGetPackets: no interfaces up: sleeping
>>>>>>>>>
>>>>>>>>> $ ./argus -D 6 -i nap2 -w /tmp/out.argus
>>>>>>>>>
>>>>>>>>> Argus debugging output:
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050054 ArgusCalloc
>>>>>>>>> (1, 3144) returning 0x9d1010
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050173
>>>>>>>>> ArgusNewModeler() returning 0x9d1010
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050191 ArgusCalloc
>>>>>>>>> (1, 4237248) returning 0x7f6376fae010
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050204
>>>>>>>>> ArgusNewSource(0x9d1010) returning 0x7f6376fae010
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050217 ArgusCalloc
>>>>>>>>> (1, 312) returning 0x9d1d40
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050229 ArgusCalloc
>>>>>>>>> (1, 152) returning 0x9d27b0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050237 ArgusNewQueue
>>>>>>>>> () returning 0x9d27b0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050247 ArgusCalloc
>>>>>>>>> (1, 152) returning 0x9d2850
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050255 ArgusNewList
>>>>>>>>> () returning 0x9d2850
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050263 ArgusCalloc
>>>>>>>>> (1, 152) returning 0x9d28f0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050270 ArgusNewList
>>>>>>>>> () returning 0x9d28f0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050277
>>>>>>>>> ArgusNewOutput() returning retn 0x9d1d40
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050294
>>>>>>>>> setArgusMarReportInterval(60) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050326
>>>>>>>>> clearArgusDevice(0x7f6376fae010) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050341 ArgusCalloc
>>>>>>>>> (1, 152) returning 0x9d2990
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050349 ArgusNewList
>>>>>>>>> () returning 0x9d2990
>>>>>>>>>
>>>>>>>>> argus[16918]: NT_Init: shmem_hbseg_fifo: expected signature:
>>>>>>>>> version=17236 magic=2a0102a2 size=4644880
>>>>>>>>>
>>>>>>>>> argus[16918]: NT_Init: shmem_hbseg_fifo: actual signature..:
>>>>>>>>> version=17236 magic=2a0102a2 size=4644880
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508215 ArgusCalloc
>>>>>>>>> (1, 64) returning 0x9d31a0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508239
>>>>>>>>> ArgusPushFrontList (0x9d2990, 0x9d31a0, 1) returning 0x4216
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508258
>>>>>>>>> setArgusDevice(nap2 ) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508272
>>>>>>>>> ArgusDeleteList ((nil), 2) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508282 ArgusCalloc
>>>>>>>>> (1, 152) returning 0x9d3210
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508290 ArgusNewList
>>>>>>>>> () returning 0x9d3210
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508298 ArgusCalloc
>>>>>>>>> (1, 24) returning 0x9d1ea0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508306
>>>>>>>>> ArgusPushFrontList (0x9d3210, 0x9d1ea0, 1) returning 0x4216
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508315
>>>>>>>>> setArgusInterfaceStatus(0x7f6376fae010, 1)
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508792 ArgusCalloc
>>>>>>>>> (1, 592056) returning 0xbdaf90
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520375 ArgusCalloc
>>>>>>>>> (1, 128) returning 0xd14270
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520405
>>>>>>>>> ArgusGenerateInitialMar() returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520415 ArgusCalloc
>>>>>>>>> (1, 168) returning 0xd14300
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520529 ArgusCalloc
>>>>>>>>> (1, 262256) returning 0xd143b0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520539 ArgusCalloc
>>>>>>>>> (1, 152) returning 0xd54430
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520547 ArgusNewList
>>>>>>>>> () returning 0xd54430
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520556
>>>>>>>>> ArgusNewSocket (8) returning 0xd143b0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520596
>>>>>>>>> ArgusPushBackList (0x9d3210, 0x9d1ea0, 1) returning 1
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520606
>>>>>>>>> ArgusDeleteList (0x9d3210, 2) 1 items on list
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520614 ArgusFree (0x9d1ea0)
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520627 ArgusFree (0x9d3210)
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520635
>>>>>>>>> ArgusDeleteList (0x9d3210, 2) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520705 ArgusInitOutput() done
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.520728
>>>>>>>>> ArgusOutputProcess(0x9d1d40) starting
>>>>>>>>>
>>>>>>>>> argus[16918]: .520733 started
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.520763
>>>>>>>>> ArgusOutputProcess() looping
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.520774
>>>>>>>>> ArgusOutputProcess() waiting for input list
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520788 ArgusCalloc
>>>>>>>>> (1, 4237248) returning 0x7f632eff3010
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520801 ArgusCalloc
>>>>>>>>> (1, 152) returning 0x9d3210
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520809 ArgusNewList
>>>>>>>>> () returning 0x9d3210
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520829
>>>>>>>>> ArgusCloneSource(0x7f6376fae010) returning 0x7f632eff3010
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520838
>>>>>>>>> clearArgusDevice(0x7f632eff3010) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520846
>>>>>>>>> ArgusPushBackList (0x9d3210, 0x9d31a0, 1) returning 1
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.524599
>>>>>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0xd54610
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526650
>>>>>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526661
>>>>>>>>> ArgusOpenInterface(0x7f632eff3010, 'nap2') returning 1
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526670
>>>>>>>>> ArgusPushBackList (0x9d3210, 0x9d31a0, 1) returning 1
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526728 ArgusCalloc
>>>>>>>>> (1, 3144) returning 0xd54970
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526744 ArgusCalloc
>>>>>>>>> (1, 64) returning 0xd555c0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526858 ArgusCalloc
>>>>>>>>> (65536, 8) returning 0xd55610
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526867
>>>>>>>>> ArgusNewHashTable (65536) returning 0xd555c0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526875 ArgusCalloc
>>>>>>>>> (1, 104) returning 0xdd5620
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526883 ArgusCalloc
>>>>>>>>> (1, 152) returning 0xdd5690
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526890 ArgusNewQueue
>>>>>>>>> () returning 0xdd5690
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526897 ArgusCalloc
>>>>>>>>> (1, 152) returning 0xdd5730
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526905 ArgusNewQueue
>>>>>>>>> () returning 0xdd5730
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526912 ArgusCalloc
>>>>>>>>> (1, 112) returning 0xdd57d0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526920 ArgusCalloc
>>>>>>>>> (1, 40) returning 0xdd5850
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526928 ArgusCalloc
>>>>>>>>> (1, 80) returning 0xdd5880
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526936 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd58e0
>>>>>>>>>
>>>>>>>>> <repeats 8 times>
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527017 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd7fb0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527026 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd8400
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527033 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd8850
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527044 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd8ca0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527053 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd90f0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527061 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xdd9540
>>>>>>>>>
>>>>>>>>> <repeats 5 times>
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527109 ArgusCalloc
>>>>>>>>> (1, 1096) returning 0xddaad0
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527117
>>>>>>>>> ArgusInitMallocList (1048) returning
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527124
>>>>>>>>> ArgusInitModeler(0xd54970) done
>>>>>>>>>
>>>>>>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527132
>>>>>>>>> ArgusInitSource(0x7f632eff3010) returning 1
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527192
>>>>>>>>> ArgusGetPackets (0x7f632eff3010) starting
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527214
>>>>>>>>> ArgusPushFrontList (0x9d3210, 0x9d31a0, 1) returning 0x421f
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527251
>>>>>>>>> setArgusInterfaceStatus(0x7f632eff3010, 0)
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527263
>>>>>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620843
>>>>>>>>> ArgusOutputProcess() checking out clients
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620855
>>>>>>>>> ArgusOutputProcess() done with clients
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620863
>>>>>>>>> ArgusOutputProcess() looping
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620870
>>>>>>>>> ArgusOutputProcess() waiting for input list
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.677372
>>>>>>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7f63280008c0
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679516
>>>>>>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679528
>>>>>>>>> ArgusOpenInterface(0x7f632eff3010, 'nap2') returning 1
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679538
>>>>>>>>> ArgusPushFrontList (0x9d3210, 0x9d31a0, 1) returning 0x421f
>>>>>>>>>
>>>>>>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679550
>>>>>>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.720932
>>>>>>>>> ArgusOutputProcess() checking out clients
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.720942
>>>>>>>>> ArgusOutputProcess() done with clients
>>>>>>>>>
>>>>>>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.720950
>>>>>>>>> ArgusOutputProcess() looping
>>>>>>>>>
>>>>>>>>> <snip>
>>>>>>>>
>>>>>>
>>>>
>>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2589 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20120716/d7088fdd/attachment.bin>
More information about the argus
mailing list