I have finally run out of a single CPU.
Russell Fulton
r.fulton at auckland.ac.nz
Mon May 21 22:11:34 EDT 2018
Hi
All the argus processes on my sensors are now sitting on 100% cpu and presumably dropping data. One obvious approach is to use filters and multiple argus processes, unless argus has the ability to multi-thread processing.
Google turns up this tantalising snippet from http://qosient.com/argus/news.shtml:
> Mar 11 13:41:48 EST 2011 – Argus 3.0.4 Released
> Argus 3.0.4 and its clients are now available. Changes for 3.0.4 include enhanced multi-threaded support,
But I can find nothing else on the subject.
So what are people doing with argus on 10G links?
I am running suricata (with af-packet) and that is going nicely and I should have enough memory and CPU to run argus as well.
Russell
More information about the argus
mailing list