ArgusProcessPacketHdrs crash on Solaris 11 SPARC

Thu Nov 14 08:35:39 EST 2013

Hey Sergio,
What version of argus are running ???  If you are using argus-3.0.6 or earlier, you should grab the latest developers version.  This is running on Solaris in a number if sites without problem.

   http://qosient.com/argus/dev/argus-latest-tar.gz

There are a lot of fixes there, so that may be successful.

It is likely that you have a packet that is causing a header parsing error.  If that is the case, if you can capture the packet, we can fix the problem pretty quick.  Catching the error in gdb(), is then the a best first step, as you can step through the error.

There are a lot of features in later argi, such as tunnel discovery mode, that could contribute to a parsing error.  Have you customized your /etc/argus.conf configuration file ???

Carter

> On Nov 14, 2013, at 7:01 AM, Sergio Luis Moreira Da Silva <sergio.l.silva at oracle.com> wrote:
> 
> Hi,
> 
> I'm trying to install argus on Solaris 11 (SPARC), at it generates a core dump as soon as the daemon starts.
> I'd enabled the ARGUSDEBUG compilation flag and it looks like thread# 3 crashes after ArgusProcessPacketHdrs
> 
> Can someone point me a few tips on the source code of where I should start checking the code to see why this is happening?
> 
> Thanks in advance,
> 
> -- Sergio Silva
> 
> 
> root at plpsvm33:/var/cores# pstack  /var/cores/core_argus_60001_3438_1384429156
> core '/var/cores/core_argus_60001_3438_1384429156' of 3438:     /opt/argus/sbin/argus -D 15
> -----------------  lwp# 1 / thread# 1  --------------------
>  f02758d0 __lwp_park (4ea708, 4ea6f0, ffbff4c8, 0, f031e1f0, ff000000) + 14
>  f026f6e0 cond_wait_queue (4ea708, 4ea6f0, ffbff4c8, 0, 0, 0) + 4c
>  f026fc04 cond_wait_common (4ea708, 4ea6f0, ffbff4c8, 0, 3b9aca00, 0) + 2e0
>  f026fe04 __cond_timedwait (4ea708, 4ea6f0, ffbff60c, 0, 0, 0) + 84
>  f026fe9c cond_timedwait (4ea708, 4ea6f0, ffbff60c, 0, ff2a2a40, 1) + 14
>  f026fedc pthread_cond_timedwait (4ea708, 4ea6f0, ffbff60c, 0, 4ea6f0, ffbff614) + c
>  0002e3b0 ArgusSourceProcess (e2330, 6b688, 4ea708, 4082b8, ffbff614, ffbff60c) + 45c
>  0001dcb0 main     (3, ffbffbc0, 8e400, 8e400, 8f400, 8e400) + 628
>  0001a07c _start   (0, 0, 0, 0, 0, 0) + 5c
> -----------------  lwp# 2 / thread# 2  --------------------
>  f02758d0 __lwp_park (4ea920, 4ea908, ff1ebdc8, 0, f031e1f0, ff000000) + 14
>  f026f6e0 cond_wait_queue (4ea920, 4ea908, ff1ebdc8, 0, 0, 0) + 4c
>  f026fc04 cond_wait_common (4ea920, 4ea908, ff1ebdc8, 0, 3b9aca00, 0) + 2e0
>  f026fe04 __cond_timedwait (4ea920, 4ea908, ff1ebf98, 0, 0, 0) + 84
>  f026fe9c cond_timedwait (4ea920, 4ea908, ff1ebf98, 0, ff0d0240, ffffff) + 14
>  f026fedc pthread_cond_timedwait (4ea920, 4ea908, ff1ebf98, 0, 4ea908, ff1ebf90) + c
>  00037094 ArgusOutputProcess (4ea760, 6e590, 6e618, ff0d0240, 36c1c, 4ea900) + 478
>  f0275848 _lwp_start (0, 0, 0, 0, 0, 0)
> -----------------  lwp# 3 / thread# 3  --------------------
>  0002028c ArgusProcessPacketHdrs (a096a0, 9896ba, 58, 800, ff0cbf98, 4ee888) + 2bc
>  0002726c ArgusProcessPacket (581268, 9896ac, 66, ff0cbc80, 1, 400c4) + f8
>  00029e70 ArgusEtherPacket (581268, 4ee888, 9896ac, 0, 4ee888, 1) + 210
>  0002f3d8 ArgusGetPackets (581268, 1, 581268, 1, 0, 6b840) + a58
>  f0275848 _lwp_start (0, 0, 0, 0, 0, 0)
> 
> 
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.285459 ArgusCalloc (1, 301208) returning 4f7970
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.291632 ArgusCalloc (1, 128) returning 4f2428
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.291824 getArgusID(e2330) done
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.291895 getArgusIDType(e2330) done
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.291966 ArgusGenerateInitialMar() returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.292538 ArgusEstablishListen(4ea760, ffbfe610) binding: 127.0.0.1:561 family: 2
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.292746 ArgusEstablishListen(4ea760, ffbfe610) binding: 10.185.216.9:561 family: 2
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.292854 ArgusEstablishListen(4ea760, ffbfe610) returning 6
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.292979 ArgusPopFrontList (4f2ae0) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293056 ArgusCalloc (1, 92) returning 4ee5c8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293196 ArgusCalloc (1, 262224) returning 541210
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293277 ArgusCalloc (1, 80) returning 4ee630
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293342 ArgusNewList () returning 4ee630
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293413 ArgusNewSocket (7) returning 541210
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293604 ArgusAddToQueue (4ea840, 4ee5c8) returning 1
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293683 ArgusPushBackList (4f23d0, 4f2ae0, 1) returning 1
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293750 ArgusDeleteList (4f23d0, 2) 1 items on list
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293818 ArgusPopFrontList (4f2ae0) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293882 ArgusFree (4f2ae0)
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.293966 ArgusFree (4f23d0)
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.294030 ArgusDeleteList (4f23d0, 2) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.294628 ArgusInitOutput() done
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] 14 Nov 13 11:39:16.294787 started
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.294665 ArgusOutputProcess(4ea760) starting
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.294901 ArgusPopFrontList (4f1f60) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.295173 ArgusOutputProcess() looping
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.295338 ArgusOutputProcess() checking for remotes
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.295556 ArgusOutputProcess() done checking for remotes
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.295676 ArgusOutputProcess() waiting for input list
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300084 ArgusCalloc (1, 4228136) returning 581268
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300279 ArgusCalloc (1, 80) returning 4f23d0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300388 ArgusNewList () returning 4f23d0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300493 ArgusCloneSource(e2330) returning 581268
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300600 ArgusPopFrontList (0) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300694 clearArgusDevice(581268) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.300787 ArgusPushBackList (4f23d0, 4f1f60, 1) returning 1
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.301873 ArgusPopFrontList (4f1f60) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.304042 ArgusOpenInterface() pcap_open_live(igb0) returned 4ee688
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.304488 Arguslookup_pcap_callback(1) returning 29c60
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.304577 ArgusOpenInterface(581268, 'igb0') returning 1
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.304682 ArgusPushBackList (4f23d0, 4f1f60, 1) returning 1
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.304924 ArgusCalloc (1, 262712) returning a096a0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.305350 ArgusCalloc (1, 48) returning 4ee8a0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.305549 ArgusCalloc (65536, 4) returning a498e0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.305652 ArgusNewHashTable (65536) returning 4ee8a0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.305755 ArgusCalloc (1, 104) returning 4ee8d8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.305858 ArgusCalloc (1, 96) returning 4ee948
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.305958 ArgusNewQueue () returning 4ee948
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306053 ArgusCalloc (1, 96) returning 4ee9b0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306137 ArgusNewQueue () returning 4ee9b0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306223 ArgusCalloc (1, 112) returning 4eea18
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306310 ArgusCalloc (1, 40) returning 4eea90
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306681 ArgusCalloc (1, 56) returning 4eeac0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306774 ArgusCalloc (1, 932) returning 4eeb00
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306866 ArgusCalloc (1, 932) returning 4eeeb0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.306963 ArgusCalloc (1, 932) returning 4ef260
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307066 ArgusCalloc (1, 932) returning 4ef610
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307173 ArgusCalloc (1, 932) returning a898e8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307281 ArgusCalloc (1, 932) returning a89c98
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307366 ArgusCalloc (1, 932) returning a8a048
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307469 ArgusCalloc (1, 932) returning a8a3f8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307601 ArgusCalloc (1, 932) returning a8a7a8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307696 ArgusCalloc (1, 932) returning a8ab58
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307789 ArgusCalloc (1, 932) returning a8af08
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307872 ArgusCalloc (1, 932) returning a8b2b8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.307963 ArgusCalloc (1, 932) returning a8b668
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308073 ArgusCalloc (1, 932) returning a8ba18
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308199 ArgusCalloc (1, 932) returning a8bdc8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308294 ArgusCalloc (1, 932) returning a8c178
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308377 ArgusCalloc (1, 932) returning a8c528
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308464 ArgusCalloc (1, 932) returning a8c8d8
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308559 ArgusCalloc (1, 932) returning a8cc88
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308653 ArgusCalloc (1, 932) returning a8d038
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308753 ArgusInitMallocList (904) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308848 ArgusInitModeler(a096a0) done
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000001]: 14 Nov 13 11:39:16.308935 ArgusInitSource(581268) returning 1
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.309266 ArgusGetPackets (581268) starting
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.309492 ArgusPopFrontList (4f1f60) returning
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.309668 ArgusPushFrontList (4f23d0, 4f1f60, 1) returning ffffff
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.310027 setArgusInterfaceStatus(581268, 1)
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] 14 Nov 13 11:39:16.310239 ArgusGetInterfaceStatus: interface igb0 is up
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.310342 ArgusGetPackets: interface igb0 is selectable
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.310418 setArgusInterfaceStatus(581268, 1)
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.395707 ArgusOutputStatusTime(4ea760) done
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.395836 ArgusOutputProcess() checking out clients
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.395922 ArgusWriteOutSocket (4ea760, 4ee5c8) returning 0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.396007 ArgusOutputProcess() done with clients
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.396094 ArgusOutputProcess() looping
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.396173 ArgusOutputProcess() checking for remotes
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.396258 ArgusOutputProcess() done checking for remotes
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.396347 ArgusOutputProcess() waiting for input list
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496365 ArgusOutputStatusTime(4ea760) done
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496479 ArgusOutputProcess() checking out clients
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496560 ArgusWriteOutSocket (4ea760, 4ee5c8) returning 0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496644 ArgusOutputProcess() done with clients
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496725 ArgusOutputProcess() looping
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496804 ArgusOutputProcess() checking for remotes
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.496896 ArgusOutputProcess() done checking for remotes
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000002]: 14 Nov 13 11:39:16.497015 ArgusOutputProcess() waiting for input list
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.510518 ArgusGetPackets: select() returned 0
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.510770 ArgusProcessEtherHdr(9896ac, 88) returning 0x800
> Nov 14 11:39:16 plpsvm33 argus[3438]: [ID 702911 daemon.alert] argus[3438.00000003]: 14 Nov 13 11:39:16.510859 ArgusProcessPacketHdrs(a096a0, 9896ac, 102, 1) returning 2048
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20131114/fcfb7d71/attachment.html>