ra as a long running task
Carter Bullard via Argus-info
argus-info at lists.andrew.cmu.edu
Wed May 4 10:05:05 EDT 2016
Hey Brad,
Shouldn’t be any memory leaks. What version are you running ???
If you want to permanently collect from argus, definitely use radium as that provides multi-access to the argus stream. It also allows you to collect from multiple sources, so I would suggest that you think about radium.
Carter
> On May 4, 2016, at 9:06 AM, Brad via Argus-info <argus-info at lists.andrew.cmu.edu> wrote:
>
> Is ra meant to be used for long running tasks?
>
> When I run it to read from a socket (see below) for an extended period (a few days) memory usage slowly grows to 100% and the process dies.
>
> ra -c, -L-1 -nn -p 3 -Zs -s stime ltime dur saddr daddr sport dport state proto spkts sbytes dbytes -S argus_sensor:5050
>
> If ra should work acceptably in this situation, I can debug more and find the cause of the memory leak. If it is not meant for this purpose, what should I use instead of ra. radium?
>
> Thanks,
>
> Brad
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160504/1dd3eb79/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6285 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160504/1dd3eb79/attachment.bin>
More information about the argus
mailing list