ra as a long running task

Carter Bullard via Argus-info argus-info at lists.andrew.cmu.edu
Wed May 4 10:05:05 EDT 2016


Hey Brad,
Shouldn’t be any memory leaks.  What version are you running ???  

If you want to permanently collect from argus, definitely use radium as that provides multi-access to the argus stream.  It also allows you to collect from multiple sources, so I would suggest that you think about radium.

Carter

> On May 4, 2016, at 9:06 AM, Brad via Argus-info <argus-info at lists.andrew.cmu.edu> wrote:
> 
> Is ra meant to be used for long running tasks?
> 
> When I run it to read  from a socket (see below) for an extended period (a few days) memory usage slowly grows to 100% and the process dies.
> 
> ra -c, -L-1 -nn -p 3 -Zs -s stime ltime dur saddr daddr sport dport state proto spkts sbytes dbytes -S argus_sensor:5050
> 
> If ra should work acceptably in this situation, I can debug more and find the cause of the memory leak. If it is not meant for this purpose, what should I use instead of ra. radium?
> 
> Thanks,
> 
> Brad
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160504/1dd3eb79/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6285 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160504/1dd3eb79/attachment.bin>


More information about the argus mailing list