E Server crash

[Carter Bullard]

Hey Guys,
   Sorry I've been delayed in responding.  Out on business
and some DSL problems %(  OK, didn't I send a patch for
this one?  I should have if I didn't.  This will fix this
one, and it is in "F" which should have come out this past
weekend but I'll try to have tomorrow.

Carter


cvs diff ArgusModeler.c
Index: ArgusModeler.c
===================================================================
RCS file: /usr/local/cvsroot/argus/server/ArgusModeler.c,v
retrieving revision 1.96
diff -r1.96 ArgusModeler.c
450c450
<    if ((ArgusThisNetworkFlowType & 0xFFFF) == ETHERTYPE_IP) {
---
>    if (ArgusThisIpHdr && ((ArgusThisNetworkFlowType & 0xFFFF) ==
ETHERTYPE_IP)) {

--



-----Original Message-----
From: owner-argus at lists.andrew.cmu.edu
[mailto:owner-argus at lists.andrew.cmu.edu]On Behalf Of Russell Fulton
Sent: Monday, December 04, 2000 8:39 PM
To: argus at lists.andrew.cmu.edu
Subject: E Server crash




#0  0x804af59 in ArgusUpdateFlow (flowstr=0x8279d00, state=1 '\001') at
./ArgusModeler.c:451
451           if (((ArgusThisIpHdr->ip_off & 0x1fff) == 0) &&
(ArgusThisIpHdr->ip_off & IP_MF)) {
(gdb) l
446
447        flowstr->state.lasttime = ArgusGlobalTime;
448        flowstr->qhdr.lasttime  = ArgusGlobalTime;
449
450        if ((ArgusThisNetworkFlowType & 0xFFFF) == ETHERTYPE_IP) {
451           if (((ArgusThisIpHdr->ip_off & 0x1fff) == 0) &&
(ArgusThisIpHdr->ip_off & IP_MF)) {
452              struct ArgusFlowStruct *frag = NULL;
453
454              ArgusThisLength = ArgusCurrLength;
455
(gdb) p ArgusThisIpHdr
$1 = (struct ip *) 0x0


Argus has been running several days.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20001205/bdef882f/attachment.html>