ra dies off doing analysis

Eric eric-list-argus at catastrophe.net
Thu Aug 28 21:45:06 EDT 2003


I've got a core from ra.

First, here's the sizes of the files I'm processing

$ du -h 1*/
2.5G    10/
2.0G    11/
2.3G    12/
1.5G    13/
683M    14/
1.4G    15/
2.2G    16/
567M    17/
1.7G    18/
2.0G    19/

Next some system information..

$ uname -a
OpenBSD saturn 3.3 GENERIC#44 i386

$ gcc -v
Reading specs from
/usr/lib/gcc-lib/i386-unknown-openbsd3.3/2.95.3/specs
gcc version 2.95.3 20010125 (prerelease, propolice)

$ as -v
GNU assembler version 1.92.3, OpenBSD $Revision: 1.2 $

$ bison --version
bison (GNU Bison) 1.35

Copyright 1984, 1986, 1989, 1992, 2000, 2001, 2002
Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.

$ ra -h
Ra Version 2.0.5


And finally, the core analysis.

$ gdb /usr/local/bin/ra ra.core 
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License,
and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-unknown-openbsd3.3"...
Core was generated by `ra'.
Program terminated with signal 6, Abort trap.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libm.so.1.0...done.
Reading symbols from /usr/lib/libc.so.29.0...done.
#0  0x400c5fcf in _thread_sys_kill ()
(gdb) where
#0  0x400c5fcf in _thread_sys_kill ()
#1  0x400c58bb in abort ()
#2  0x13cd5 in argus_filter_orig ()
#3  0x1399e in argus_filter ()
#4  0x5714 in ArgusHandleDatum ()
#5  0x72d0 in ArgusReadConnection ()
#6  0x548f in main ()
(gdb) n
The program is not being run.
(gdb) backtrace
#0  0x400c5fcf in _thread_sys_kill ()
#1  0x400c58bb in abort ()
#2  0x13cd5 in argus_filter_orig ()
#3  0x1399e in argus_filter ()
#4  0x5714 in ArgusHandleDatum ()
#5  0x72d0 in ArgusReadConnection ()
#6  0x548f in main ()
(gdb) info all-registers
eax            0x0      0
ecx            0x0      0
edx            0x2817   10263
ebx            0x400d8060       1074626656
esp            0xcfbf00a8       0xcfbf00a8
ebp            0xcfbf00d4       0xcfbf00d4
esi            0xcfbf00d0       -809566000
edi            0x40110000       1074855936
eip            0x400c5fcf       0x400c5fcf
eflags         0x292    658
cs             0x1f     31
ss             0x27     39
ds             0x27     39
es             0x27     39
fs             0x27     39
gs             0x27     39
(gdb) q

(gdb) run -ncr 1*/argus* - src net 10.20.0.0/16 and udp dst port 69 >> /tmp/foo
Starting program: /usr/local/bin/ra -ncr 1*/argus* - src net 10.20.0.0/16 and udp dst port 69 >> /tmp/foo
1              
Program received signal SIGABRT, Aborted.
0x400c5fcf in _thread_sys_kill ()
(gdb) bt
#0  0x400c5fcf in _thread_sys_kill ()
#1  0x400c58bb in abort ()
#2  0x13cd5 in argus_filter_orig ()
#3  0x1399e in argus_filter ()
#4  0x5714 in ArgusHandleDatum ()
#5  0x72d0 in ArgusReadConnection ()
#6  0x548f in main ()
(gdb) where
#0  0x400c5fcf in _thread_sys_kill ()
#1  0x0 in ?? ()
(gdb) info all-registers
eax            0x0      0
ecx            0x0      0
edx            0x3819   14361
ebx            0x400d8060       1074626656
esp            0xcfbf0154       0xcfbf0154
ebp            0xcfbf0180       0xcfbf0180
esi            0xcfbf017c       -809565828
edi            0x40110000       1074855936
eip            0x400c5fcf       0x400c5fcf
eflags         0x382    898
cs             0x1f     31
ss             0x27     39
ds             0x27     39
es             0x27     39
fs             0x27     39
gs             0x27     39
(gdb) q


Any help is appreciated.

Thanks.

- Eric



More information about the argus mailing list