Too agressive - Multiple instances running???

Jeff Weisberg jaw+arguslist at tcp4me.com
Fri Feb 15 14:21:33 EST 2008



| I copied the exact same config from a backup just prior to the crash so I
| know my config is good.  Basically what I am seeing is Argus appears to be
| hitting the same items multiple times (3 right now) and sometimes that
| number seems to go as high as 5 during the same testing cycle.  Another
| issue is if something does go down, I seem to get many duplicate
| notifications.  Argus is being started with the default rc.argusd from
| rc3.d.

| root      5292  0.0  0.7 162376 16032 ?        Ss   Feb05   0:00 Argus
| root     13479  0.7  1.2 174008 26692 ?        S    Feb05  92:40 Argus
| root     21116  0.7  1.2 174012 26064 ?        S    Feb11  31:07 Argus
| root     21118  0.7  1.2 173996 26044 ?        S    Feb11  30:51 Argus


you don't remember whether anything interesting happened on Feb11?

what are the parent-process-ids of the Feb11 processes?
5292? 13479? other?

try:

shut down argus.
verify with ps that the extra processes are gone. (kill until dead).
make sure syslog is enabled in your config.
restart argus.

how long until these extra processes appear?
is there anything in syslog around the time this happens?





More information about the Arguslist mailing list