Too agressive - Multiple instances running???
jaw+arguslist at tcp4me.com
Fri Feb 15 14:21:33 EST 2008
| I copied the exact same config from a backup just prior to the crash so I
| know my config is good. Basically what I am seeing is Argus appears to be
| hitting the same items multiple times (3 right now) and sometimes that
| number seems to go as high as 5 during the same testing cycle. Another
| issue is if something does go down, I seem to get many duplicate
| notifications. Argus is being started with the default rc.argusd from
| root 5292 0.0 0.7 162376 16032 ? Ss Feb05 0:00 Argus
| root 13479 0.7 1.2 174008 26692 ? S Feb05 92:40 Argus
| root 21116 0.7 1.2 174012 26064 ? S Feb11 31:07 Argus
| root 21118 0.7 1.2 173996 26044 ? S Feb11 30:51 Argus
you don't remember whether anything interesting happened on Feb11?
what are the parent-process-ids of the Feb11 processes?
5292? 13479? other?
shut down argus.
verify with ps that the extra processes are gone. (kill until dead).
make sure syslog is enabled in your config.
how long until these extra processes appear?
is there anything in syslog around the time this happens?
More information about the Arguslist