The process is running, I get all the events in audit.log if I use 'RAW' mode, I am losing events when using the dispatcher mode. (ex: there are 100 events to be received, I receive just 70) Moreover there is no delay in the dispatcher's end as I have it multithreaded.

I am using the skeleton code to receive events in the dispatcher.

- Vish
On Mar 31, 2010, at 3:26 PM, Steve Grubb wrote:

On Wednesday 31 March 2010 03:07:59 pm Vishwanath Venkatesan wrote:
I having troubles receiving events with the dispatcher in ubuntu-9.04.

What kind of trouble? Is the process running? Does strace show it doing
anything? If it is doing something, I'd add syslog calls to debug it.

-Steve

--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to