Argus w/ napatech libpcap

Aleksander aleksander.funes at gmail.com
Thu Jun 21 22:10:44 EDT 2012 

Hi Carter,

    My apologies, I must have used the stable version by mistake.
This time around I have double-checked to make sure that all previous
argus installs/traces were removed and have conducted the tests
mentioned in my previous email again.

    I have compiled tcpdump versions 4.1.1 and 4.3.0 against the
Napatech library, and have been able to capture packets with the tools
on napatech virtual interfaces.

Here's the debug output from running argus v3.0.6.1 on a virtual
napatech interface.  The patch you recommended was already there, so I
left ArgusSource.c intact.

$ sudo argus -D 6 -i nap2 -w /tmp/out2.argus

argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728103 ArgusCalloc
(1, 3144) returning 0x1935010
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728222
ArgusNewModeler() returning 0x1935010
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728240 ArgusCalloc
(1, 4237248) returning 0x7fcf8492b010
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728254
ArgusNewSource(0x1935010) returning 0x7fcf8492b010
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728268 ArgusCalloc
(1, 312) returning 0x1935d40
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728279 ArgusCalloc
(1, 152) returning 0x19367b0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728286 ArgusNewQueue
() returning 0x19367b0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728297 ArgusCalloc
(1, 152) returning 0x1936850
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728305 ArgusNewList
() returning 0x1936850
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728313 ArgusCalloc
(1, 152) returning 0x19368f0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728320 ArgusNewList
() returning 0x19368f0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728327
ArgusNewOutput() returning retn 0x1935d40
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728344
setArgusMarReportInterval(60) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728372
clearArgusDevice(0x7fcf8492b010) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728386 ArgusCalloc
(1, 152) returning 0x1936990
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:45.728395 ArgusNewList
() returning 0x1936990
argus[6621]: NT_Init: shmem_hbseg_fifo: expected signature:
version=17236 magic=2a0102a2 size=4644880
argus[6621]: NT_Init: shmem_hbseg_fifo: actual signature..:
version=17236 magic=2a0102a2 size=4644880
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193239 ArgusCalloc
(1, 64) returning 0x19371a0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193275
ArgusPushFrontList (0x1936990, 0x19371a0, 1) returning 0x19dd
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193290
setArgusDevice(nap2 ) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193305
ArgusDeleteList ((nil), 2) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193315 ArgusCalloc
(1, 152) returning 0x1937210
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193324 ArgusNewList
() returning 0x1937210
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193331 ArgusCalloc
(1, 24) returning 0x1935ea0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193339
ArgusPushFrontList (0x1937210, 0x1935ea0, 1) returning 0x19dd
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193348
setArgusInterfaceStatus(0x7fcf8492b010, 1)
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.193791 ArgusCalloc
(1, 592056) returning 0x1b3ef90
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205449 ArgusCalloc
(1, 128) returning 0x1c78270
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205475
ArgusGenerateInitialMar() returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205485 ArgusCalloc
(1, 168) returning 0x1c78300
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205604 ArgusCalloc
(1, 262256) returning 0x1c783b0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205615 ArgusCalloc
(1, 152) returning 0x1cb8430
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205622 ArgusNewList
() returning 0x1cb8430
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205632 ArgusNewSocket
(8) returning 0x1c783b0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205672
ArgusPushBackList (0x1937210, 0x1935ea0, 1) returning 1
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205682
ArgusDeleteList (0x1937210, 2) 1 items on list
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205690 ArgusFree (0x1935ea0)
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205703 ArgusFree (0x1937210)
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205711
ArgusDeleteList (0x1937210, 2) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205788 ArgusInitOutput() done
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.205804
ArgusOutputProcess(0x1935d40) starting
argus[6621]: 21 Jun 12 20:37:46.205817 started
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.205852
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.205863
ArgusOutputProcess() waiting for input list
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205882 ArgusCalloc
(1, 4237248) returning 0x7fcf3c7f3010
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205895 ArgusCalloc
(1, 152) returning 0x1937210
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205903 ArgusNewList
() returning 0x1937210
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205916
ArgusCloneSource(0x7fcf8492b010) returning 0x7fcf3c7f3010
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205926
clearArgusDevice(0x7fcf3c7f3010) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.205934
ArgusPushBackList (0x1937210, 0x19371a0, 1) returning 1
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.209754
ArgusOpenInterface() pcap_open_live(nap2) returned 0x1cb8610
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211698
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211709
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211717
ArgusPushBackList (0x1937210, 0x19371a0, 1) returning 1
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211773 ArgusCalloc
(1, 3144) returning 0x1cb8970
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211788 ArgusCalloc
(1, 64) returning 0x1cb95c0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211902 ArgusCalloc
(65536, 8) returning 0x1cb9610
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211911
ArgusNewHashTable (65536) returning 0x1cb95c0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211920 ArgusCalloc
(1, 104) returning 0x1d39620
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211927 ArgusCalloc
(1, 152) returning 0x1d39690
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211935 ArgusNewQueue
() returning 0x1d39690
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211942 ArgusCalloc
(1, 152) returning 0x1d39730
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211949 ArgusNewQueue
() returning 0x1d39730
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211956 ArgusCalloc
(1, 112) returning 0x1d397d0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211964 ArgusCalloc
(1, 40) returning 0x1d39850
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211972 ArgusCalloc
(1, 80) returning 0x1d39880
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211980 ArgusCalloc
(1, 1096) returning 0x1d398e0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211991 ArgusCalloc
(1, 1096) returning 0x1d39d30
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.211999 ArgusCalloc
(1, 1096) returning 0x1d3a180
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212007 ArgusCalloc
(1, 1096) returning 0x1d3a5d0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212015 ArgusCalloc
(1, 1096) returning 0x1d3aa20
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212025 ArgusCalloc
(1, 1096) returning 0x1d3ae70
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212034 ArgusCalloc
(1, 1096) returning 0x1d3b2c0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212041 ArgusCalloc
(1, 1096) returning 0x1d3b710
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212049 ArgusCalloc
(1, 1096) returning 0x1d3bb60
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212060 ArgusCalloc
(1, 1096) returning 0x1d3bfb0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212069 ArgusCalloc
(1, 1096) returning 0x1d3c400
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212077 ArgusCalloc
(1, 1096) returning 0x1d3c850
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212088 ArgusCalloc
(1, 1096) returning 0x1d3cca0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212097 ArgusCalloc
(1, 1096) returning 0x1d3d0f0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212105 ArgusCalloc
(1, 1096) returning 0x1d3d540
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212112 ArgusCalloc
(1, 1096) returning 0x1d3d990
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212123 ArgusCalloc
(1, 1096) returning 0x1d3dde0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212132 ArgusCalloc
(1, 1096) returning 0x1d3e230
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212140 ArgusCalloc
(1, 1096) returning 0x1d3e680
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212148 ArgusCalloc
(1, 1096) returning 0x1d3ead0
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212155
ArgusInitMallocList (1048) returning
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212162
ArgusInitModeler(0x1cb8970) done
argus[6621.0077d384cf7f0000]: 21 Jun 12 20:37:46.212170
ArgusInitSource(0x7fcf3c7f3010) returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212231
ArgusGetPackets (0x7fcf3c7f3010) starting
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212253
ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212269
setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212278
setArgusInterfaceStatus(0x7fcf3c7f3010, 0)
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.212286
ArgusGetPackets: no interfaces up: sleeping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305921
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305933
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305941
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.305948
ArgusOutputProcess() waiting for input list
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.362414
ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf340008c0
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364179
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364191
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364200
ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364209
setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.364220
ArgusGetPackets: no interfaces up: sleeping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406010
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406020
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406028
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.406035
ArgusOutputProcess() waiting for input list
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506107
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506118
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506125
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.506132
ArgusOutputProcess() waiting for input list
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.514290
ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34000c40
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.516044
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.516055
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.516063
ArgusGetPackets: no interfaces up: sleeping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606197
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606208
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606215
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.606222
ArgusOutputProcess() waiting for input list
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.666144
ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34000fc0
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667926
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667937
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667945
ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667954
setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.667961
ArgusGetPackets: no interfaces up: sleeping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706283
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706293
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706301
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.706307
ArgusOutputProcess() waiting for input list
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806364
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806375
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806383
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.806389
ArgusOutputProcess() waiting for input list
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.818030
ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34001340
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819786
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819797
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819805
ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819814
setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.819821
ArgusGetPackets: no interfaces up: sleeping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906457
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906468
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906475
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:46.906482
ArgusOutputProcess() waiting for input list
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.969896
ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf340016c0
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971650
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971661
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971670
ArgusPushFrontList (0x1937210, 0x19371a0, 1) returning 0x19e6
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971678
setArgusInterfaceStatus(0x7fcf3c7f3010, 1)
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:46.971686
ArgusGetPackets: no interfaces up: sleeping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006541
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006552
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006560
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.006566
ArgusOutputProcess() waiting for input list
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106631
ArgusOutputProcess() checking out clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106642
ArgusOutputProcess() done with clients
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106649
ArgusOutputProcess() looping
argus[6621.00e75f3dcf7f0000]: 21 Jun 12 20:37:47.106656
ArgusOutputProcess() waiting for input list
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.121755
ArgusOpenInterface() pcap_open_live(nap2) returned 0x7fcf34001a40
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.123523
Arguslookup_pcap_callback(1) returning 0x4170e5
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.123534
ArgusOpenInterface(0x7fcf3c7f3010, 'nap2') returning 1
argus[6621.00277f3ccf7f0000]: 21 Jun 12 20:37:47.123543
ArgusGetPackets: no interfaces up: sleeping

<snip>


On Thu, Jun 21, 2012 at 9:43 AM, Carter Bullard <carter at qosient.com> wrote:
> Hey Aleksander,
> Your debug output is inconsistent with the latest argus-3.0.6.1 release code.
> If you haven't recently downloaded the newest code, grab it from the server
>
>   http://qosient.com/argus/src/argus-3.0.6.1.tar.gz
>
> You said that vanilla tcpdump, compiled against the napatech libpcap works?
> We try to do just what tcpdump() does, just for this reason.  What version
> of tcpdump are you using?
>
> Carter
>
>
>
> On Jun 21, 2012, at 1:32 AM, Aleksander wrote:
>
>> Hi Carter,
>>
>>   Thanks for patch and the quick response.  I am using a new card
>> with the latest drivers (3GD).  I applied the patch, but it didn't
>> seem to help.  I added "nap" as you directed, and also tried adding
>> the full interface name as well, but no luck.  I tried renaming the
>> virtual interface to "dag" just for kicks, but it didn't seem to make
>> any difference.  If I use Argus compiled with the Napatech libpcap
>> against a non-Napatech interface (eth0), it does capture packets.
>>
>> Here's the debug output from my last failed attempt:
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966058 ArgusCalloc
>> (1, 3144) returning 0xcda010
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966183
>> ArgusNewModeler() returning 0xcda010
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966202 ArgusCalloc
>> (1, 4237248) returning 0x7f5f11f65010
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966217
>> ArgusNewSource(0xcda010) returning 0x7f5f11f65010
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966232 ArgusCalloc
>> (1, 312) returning 0xcdad40
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966242 ArgusCalloc
>> (1, 152) returning 0xcdb7b0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966250 ArgusNewQueue
>> () returning 0xcdb7b0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966261 ArgusCalloc
>> (1, 152) returning 0xcdb850
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966269 ArgusNewList
>> () returning 0xcdb850
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966277 ArgusCalloc
>> (1, 152) returning 0xcdb8f0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966284 ArgusNewList
>> () returning 0xcdb8f0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966291
>> ArgusNewOutput() returning retn 0xcdad40
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966309
>> setArgusMarReportInterval(60) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966338
>> clearArgusDevice(0x7f5f11f65010) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966352 ArgusCalloc
>> (1, 152) returning 0xcdb990
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:17.966360 ArgusNewList
>> () returning 0xcdb990
>> argus[14758]: NT_Init: shmem_hbseg_fifo: expected signature:
>> version=17236 magic=2a0102a2 size=4644880
>> argus[14758]: NT_Init: shmem_hbseg_fifo: actual signature..:
>> version=17236 magic=2a0102a2 size=4644880
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428706 ArgusCalloc
>> (1, 64) returning 0xcdc1a0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428728
>> ArgusPushFrontList (0xcdb990, 0xcdc1a0, 1) returning 0x39a6
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428748
>> setArgusDevice(nap2 ) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428763
>> ArgusDeleteList ((nil), 2) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428773 ArgusCalloc
>> (1, 152) returning 0xcdc210
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428781 ArgusNewList
>> () returning 0xcdc210
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428789 ArgusCalloc
>> (1, 24) returning 0xcdaea0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428797
>> ArgusPushFrontList (0xcdc210, 0xcdaea0, 1) returning 0x39a6
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.428806
>> setArgusInterfaceStatus(0x7f5f11f65010, 1)
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.429295 ArgusCalloc
>> (1, 592056) returning 0xee3f90
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440846 ArgusCalloc
>> (1, 128) returning 0x101d270
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440862
>> getArgusID(0x7f5f11f65010) done
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440870
>> getArgusIDType(0x7f5f11f65010) done
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440887
>> ArgusGenerateInitialMar() returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440896
>> ArgusPopFrontList (0xcdaea0) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.440904 ArgusCalloc
>> (1, 168) returning 0x101d300
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441016 ArgusCalloc
>> (1, 262256) returning 0x101d3b0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441026 ArgusCalloc
>> (1, 152) returning 0x105d430
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441034 ArgusNewList
>> () returning 0x105d430
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441043
>> ArgusNewSocket (8) returning 0x101d3b0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441095
>> ArgusAddToQueue (0xcdb7b0, 0x101d300) returning 1
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441107
>> ArgusPushBackList (0xcdc210, 0xcdaea0, 1) returning 1
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441116
>> ArgusDeleteList (0xcdc210, 2) 1 items on list
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441123
>> ArgusPopFrontList (0xcdaea0) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441131 ArgusFree (0xcdaea0)
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441144 ArgusFree (0xcdc210)
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441155
>> ArgusDeleteList (0xcdc210, 2) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441222 ArgusInitOutput() done
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.441243
>> ArgusOutputProcess(0xcdad40) starting
>> argus[14758]: 21 Jun 12 00:11:18.441253 started
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.441292
>> ArgusOutputProcess() looping
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.441311
>> ArgusOutputProcess() waiting for input list
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441300
>> ArgusPopFrontList (0xcdc1a0) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441365 ArgusCalloc
>> (1, 4237248) returning 0x7f5ec9ff3010
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441376 ArgusCalloc
>> (1, 152) returning 0xcdc210
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441384 ArgusNewList
>> () returning 0xcdc210
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441400
>> ArgusCloneSource(0x7f5f11f65010) returning 0x7f5ec9ff3010
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441411
>> ArgusPopFrontList ((nil)) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441419
>> clearArgusDevice(0x7f5ec9ff3010) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.441427
>> ArgusPushBackList (0xcdc210, 0xcdc1a0, 1) returning 1
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.445094
>> ArgusPopFrontList (0xcdc1a0) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.445143
>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x105d610
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447355
>> Arguslookup_pcap_callback(1) returning 0x4170e5
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447370
>> ArgusOpenInterface(0x7f5ec9ff3010, 'nap2') returning 1
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447379
>> ArgusPushBackList (0xcdc210, 0xcdc1a0, 1) returning 1
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447433 ArgusCalloc
>> (1, 3144) returning 0x105d970
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447449 ArgusCalloc
>> (1, 64) returning 0x105e5c0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447544 ArgusCalloc
>> (65536, 8) returning 0x105e610
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447554
>> ArgusNewHashTable (65536) returning 0x105e5c0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447562 ArgusCalloc
>> (1, 104) returning 0x10de620
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447570 ArgusCalloc
>> (1, 152) returning 0x10de690
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447577 ArgusNewQueue
>> () returning 0x10de690
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447585 ArgusCalloc
>> (1, 152) returning 0x10de730
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447592 ArgusNewQueue
>> () returning 0x10de730
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447599 ArgusCalloc
>> (1, 112) returning 0x10de7d0
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447607 ArgusCalloc
>> (1, 40) returning 0x10de850
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447615 ArgusCalloc
>> (1, 80) returning 0x10de880
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447623 ArgusCalloc
>> (1, 1096) returning 0x10de8e0
>> <repeats 20 times>
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447796
>> ArgusInitMallocList (1048) returning
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447803
>> ArgusInitModeler(0x105d970) done
>> argus[14758.001737125f7f0000]: 21 Jun 12 00:11:18.447811
>> ArgusInitSource(0x7f5ec9ff3010) returning 1
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447878
>> ArgusGetPackets (0x7f5ec9ff3010) starting
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447903
>> ArgusPopFrontList (0xcdc1a0) returning
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447912
>> ArgusPushFrontList (0xcdc210, 0xcdc1a0, 1) returning 0x39af
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447925
>> setArgusInterfaceStatus(0x7f5ec9ff3010, 1)
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447934
>> setArgusInterfaceStatus(0x7f5ec9ff3010, 0)
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.447942
>> ArgusGetPackets: no interfaces up: sleeping
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541368
>> ArgusOutputStatusTime(0xcdad40) done
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541380
>> ArgusOutputProcess() checking out clients
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541388
>> ArgusOutputProcess() done with clients
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541395
>> ArgusOutputProcess() looping
>> argus[14758.00e7dfca5e7f0000]: 21 Jun 12 00:11:18.541402
>> ArgusOutputProcess() waiting for input list
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.598057
>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7f5ec40008c0
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600281
>> Arguslookup_pcap_callback(1) returning 0x4170e5
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600295
>> ArgusOpenInterface(0x7f5ec9ff3010, 'nap2') returning 1
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600305
>> ArgusUpdateTime (0x105d970) global time 1340255478.447941 update
>> 1340255478.647941 returning 1
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600314
>> ArgusPopFrontList (0xcdc1a0) returning
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600321
>> ArgusPushFrontList (0xcdc210, 0xcdc1a0, 1) returning 0x39af
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600329
>> setArgusInterfaceStatus(0x7f5ec9ff3010, 1)
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600340
>> ArgusProcessQueueTimeout(0x105d970, 0x10de690) done with 0 records
>> argus[14758.0027ffc95e7f0000]: 21 Jun 12 00:11:18.600349
>> ArgusGetPackets: no interfaces up: sleeping
>> `
>>
>>
>> On Wed, Jun 20, 2012 at 8:14 AM, Carter Bullard <carter at qosient.com> wrote:
>>> Hey Aleksander,
>>> This debug message may be the one to pay attention to.
>>>   argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679550 ArgusGetPackets: no interfaces up: sleeping
>>>
>>> If argus doesn't think any interfaces are up, it won't try to read any packets.
>>> For DAG cards, we have to put in special code to fool it into thinking that the
>>> interface is up.  We may have to do the same thing with Napatech cards.
>>>
>>> Is this a new card ?
>>>
>>> If you are willing to be a guinea pig, try adding this patch to ./argus/ArgusSource.c.
>>>
>>> ==== //depot/argus-3.0.6/argus/argus/ArgusSource.c#2 - /Volumes/Users/carter/argus/release/argus-3.0.6/argus/argus/ArgusSource.c ====
>>> ***************
>>> *** 4182,4188 ****
>>>     if (device == NULL)
>>>        return;
>>>
>>> !    if (strstr(device->name, "dag")) {
>>>        for (i = 0; i < src->ArgusInterfaces; i++) {
>>>           if (src->ArgusInterface[i].ArgusPd && (pcap_fileno(src->ArgusInterface[i].ArgusPd) > 0))
>>>              bzero ((char *)&src->ArgusInterface[i].ifr, sizeof(ifr));
>>> --- 4182,4188 ----
>>>     if (device == NULL)
>>>        return;
>>>
>>> !    if (strstr(device->name, "dag") || strstr(device->name, "nap")) {
>>>        for (i = 0; i < src->ArgusInterfaces; i++) {
>>>           if (src->ArgusInterface[i].ArgusPd && (pcap_fileno(src->ArgusInterface[i].ArgusPd) > 0))
>>>              bzero ((char *)&src->ArgusInterface[i].ifr, sizeof(ifr));
>>>
>>> This should get you past the idle interface problem.
>>> Send email if that helps, and I'll add it to the main code base.
>>>
>>> Carter
>>>
>>>
>>> On Jun 20, 2012, at 12:45 AM, Aleksander wrote:
>>>
>>>> Over the past few days I have been working with a Napatech 1G card.
>>>> For the most part I’ve been successful at getting the card to create
>>>> virtual interfaces and sniff traffic with tcpdump and snort.  However,
>>>> I’ve not been able to figure out why Argus is not able to process
>>>> packets from the Napatech virtual interface…  Argus appears to run
>>>> without crashing (non-demon mode), but I’m not able to generate any
>>>> flows.  If I capture packets with tcpdump, and later read the pcap
>>>> with Argus, I am able to generate flows.  Any hints or assistance you
>>>> can provide would be greatly appreciated.
>>>>
>>>> Environment:
>>>> RHEL 6.2 x86_64
>>>> Vendor modified libpcap-1.1.1
>>>> Argus v3.0.6.1
>>>>
>>>> Here’s how I’ve compiled argus:  $ ./configure –with-libpcap=/opt/vendordir
>>>>
>>>> This debug entry seems interesting, but I’m not sure what to do next:
>>>> “ArgusGetPackets: no interfaces up: sleeping
>>>>
>>>> $ ./argus -D 6 -i nap2 -w /tmp/out.argus
>>>>
>>>> Argus debugging output:
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050054 ArgusCalloc
>>>> (1, 3144) returning 0x9d1010
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050173
>>>> ArgusNewModeler() returning 0x9d1010
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050191 ArgusCalloc
>>>> (1, 4237248) returning 0x7f6376fae010
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050204
>>>> ArgusNewSource(0x9d1010) returning 0x7f6376fae010
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050217 ArgusCalloc
>>>> (1, 312) returning 0x9d1d40
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050229 ArgusCalloc
>>>> (1, 152) returning 0x9d27b0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050237 ArgusNewQueue
>>>> () returning 0x9d27b0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050247 ArgusCalloc
>>>> (1, 152) returning 0x9d2850
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050255 ArgusNewList
>>>> () returning 0x9d2850
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050263 ArgusCalloc
>>>> (1, 152) returning 0x9d28f0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050270 ArgusNewList
>>>> () returning 0x9d28f0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050277
>>>> ArgusNewOutput() returning retn 0x9d1d40
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050294
>>>> setArgusMarReportInterval(60) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050326
>>>> clearArgusDevice(0x7f6376fae010) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050341 ArgusCalloc
>>>> (1, 152) returning 0x9d2990
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.050349 ArgusNewList
>>>> () returning 0x9d2990
>>>>
>>>> argus[16918]: NT_Init: shmem_hbseg_fifo: expected signature:
>>>> version=17236 magic=2a0102a2 size=4644880
>>>>
>>>> argus[16918]: NT_Init: shmem_hbseg_fifo: actual signature..:
>>>> version=17236 magic=2a0102a2 size=4644880
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508215 ArgusCalloc
>>>> (1, 64) returning 0x9d31a0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508239
>>>> ArgusPushFrontList (0x9d2990, 0x9d31a0, 1) returning 0x4216
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508258
>>>> setArgusDevice(nap2 ) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508272
>>>> ArgusDeleteList ((nil), 2) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508282 ArgusCalloc
>>>> (1, 152) returning 0x9d3210
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508290 ArgusNewList
>>>> () returning 0x9d3210
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508298 ArgusCalloc
>>>> (1, 24) returning 0x9d1ea0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508306
>>>> ArgusPushFrontList (0x9d3210, 0x9d1ea0, 1) returning 0x4216
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508315
>>>> setArgusInterfaceStatus(0x7f6376fae010, 1)
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.508792 ArgusCalloc
>>>> (1, 592056) returning 0xbdaf90
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520375 ArgusCalloc
>>>> (1, 128) returning 0xd14270
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520405
>>>> ArgusGenerateInitialMar() returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520415 ArgusCalloc
>>>> (1, 168) returning 0xd14300
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520529 ArgusCalloc
>>>> (1, 262256) returning 0xd143b0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520539 ArgusCalloc
>>>> (1, 152) returning 0xd54430
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520547 ArgusNewList
>>>> () returning 0xd54430
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520556
>>>> ArgusNewSocket (8) returning 0xd143b0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520596
>>>> ArgusPushBackList (0x9d3210, 0x9d1ea0, 1) returning 1
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520606
>>>> ArgusDeleteList (0x9d3210, 2) 1 items on list
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520614 ArgusFree (0x9d1ea0)
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520627 ArgusFree (0x9d3210)
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520635
>>>> ArgusDeleteList (0x9d3210, 2) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520705 ArgusInitOutput() done
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.520728
>>>> ArgusOutputProcess(0x9d1d40) starting
>>>>
>>>> argus[16918]: .520733 started
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.520763
>>>> ArgusOutputProcess() looping
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.520774
>>>> ArgusOutputProcess() waiting for input list
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520788 ArgusCalloc
>>>> (1, 4237248) returning 0x7f632eff3010
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520801 ArgusCalloc
>>>> (1, 152) returning 0x9d3210
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520809 ArgusNewList
>>>> () returning 0x9d3210
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520829
>>>> ArgusCloneSource(0x7f6376fae010) returning 0x7f632eff3010
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520838
>>>> clearArgusDevice(0x7f632eff3010) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.520846
>>>> ArgusPushBackList (0x9d3210, 0x9d31a0, 1) returning 1
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.524599
>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0xd54610
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526650
>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526661
>>>> ArgusOpenInterface(0x7f632eff3010, 'nap2') returning 1
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526670
>>>> ArgusPushBackList (0x9d3210, 0x9d31a0, 1) returning 1
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526728 ArgusCalloc
>>>> (1, 3144) returning 0xd54970
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526744 ArgusCalloc
>>>> (1, 64) returning 0xd555c0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526858 ArgusCalloc
>>>> (65536, 8) returning 0xd55610
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526867
>>>> ArgusNewHashTable (65536) returning 0xd555c0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526875 ArgusCalloc
>>>> (1, 104) returning 0xdd5620
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526883 ArgusCalloc
>>>> (1, 152) returning 0xdd5690
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526890 ArgusNewQueue
>>>> () returning 0xdd5690
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526897 ArgusCalloc
>>>> (1, 152) returning 0xdd5730
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526905 ArgusNewQueue
>>>> () returning 0xdd5730
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526912 ArgusCalloc
>>>> (1, 112) returning 0xdd57d0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526920 ArgusCalloc
>>>> (1, 40) returning 0xdd5850
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526928 ArgusCalloc
>>>> (1, 80) returning 0xdd5880
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.526936 ArgusCalloc
>>>> (1, 1096) returning 0xdd58e0
>>>>
>>>> <repeats 8 times>
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527017 ArgusCalloc
>>>> (1, 1096) returning 0xdd7fb0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527026 ArgusCalloc
>>>> (1, 1096) returning 0xdd8400
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527033 ArgusCalloc
>>>> (1, 1096) returning 0xdd8850
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527044 ArgusCalloc
>>>> (1, 1096) returning 0xdd8ca0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527053 ArgusCalloc
>>>> (1, 1096) returning 0xdd90f0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527061 ArgusCalloc
>>>> (1, 1096) returning 0xdd9540
>>>>
>>>> <repeats 5 times>
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527109 ArgusCalloc
>>>> (1, 1096) returning 0xddaad0
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527117
>>>> ArgusInitMallocList (1048) returning
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527124
>>>> ArgusInitModeler(0xd54970) done
>>>>
>>>> argus[16918.00a73b77637f0000]: 19 Jun 12 23:19:24.527132
>>>> ArgusInitSource(0x7f632eff3010) returning 1
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527192
>>>> ArgusGetPackets (0x7f632eff3010) starting
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527214
>>>> ArgusPushFrontList (0x9d3210, 0x9d31a0, 1) returning 0x421f
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527251
>>>> setArgusInterfaceStatus(0x7f632eff3010, 0)
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.527263
>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620843
>>>> ArgusOutputProcess() checking out clients
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620855
>>>> ArgusOutputProcess() done with clients
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620863
>>>> ArgusOutputProcess() looping
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.620870
>>>> ArgusOutputProcess() waiting for input list
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.677372
>>>> ArgusOpenInterface() pcap_open_live(nap2) returned 0x7f63280008c0
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679516
>>>> Arguslookup_pcap_callback(1) returning 0x4170e5
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679528
>>>> ArgusOpenInterface(0x7f632eff3010, 'nap2') returning 1
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679538
>>>> ArgusPushFrontList (0x9d3210, 0x9d31a0, 1) returning 0x421f
>>>>
>>>> argus[16918.0027ff2e637f0000]: 19 Jun 12 23:19:24.679550
>>>> ArgusGetPackets: no interfaces up: sleeping
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.720932
>>>> ArgusOutputProcess() checking out clients
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.720942
>>>> ArgusOutputProcess() done with clients
>>>>
>>>> argus[16918.00e7df2f637f0000]: 19 Jun 12 23:19:24.720950
>>>> ArgusOutputProcess() looping
>>>>
>>>> <snip>
>>>
>

More information about the argus mailing list