From mboxrd@z Thu Jan  1 00:00:00 1970
From: Vishwanath Venkatesan <vvenkates@gmail.com>
Subject: Re: Events lost with dispatcher
Date: Wed, 31 Mar 2010 15:32:33 -0400
Message-ID: <DB8A3DAD-C9E3-4EB3-AB04-415CA9F828C9@gmail.com>
References: <28B815FA-A40A-4864-8268-79FA1D5223C6@gmail.com>
	<201003311526.55204.sgrubb@redhat.com>
Mime-Version: 1.0 (Apple Message framework v936)
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <201003311526.55204.sgrubb@redhat.com>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Steve Grubb <sgrubb@redhat.com>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

The process is running, I get all the events in audit.log if I use  
'RAW' mode,
I am losing events when using the dispatcher mode. (ex: there are 100  
events to be received, I receive just 70)
Moreover there is no delay in the dispatcher's end as  I  have it  
multithreaded.

I am using the skeleton code to receive events in the dispatcher.

- Vish
On Mar 31, 2010, at 3:26 PM, Steve Grubb wrote:

> On Wednesday 31 March 2010 03:07:59 pm Vishwanath Venkatesan wrote:
>> I having troubles receiving events with the dispatcher in  
>> ubuntu-9.04.
>
> What kind of trouble? Is the process running? Does strace show it  
> doing
> anything? If it is doing something, I'd add syslog calls to debug it.
>
> -Steve