ra dies off doing analysis
Eric
eric-list-argus at catastrophe.net
Thu Aug 28 21:45:06 EDT 2003
I've got a core from ra.
First, here's the sizes of the files I'm processing
$ du -h 1*/
2.5G 10/
2.0G 11/
2.3G 12/
1.5G 13/
683M 14/
1.4G 15/
2.2G 16/
567M 17/
1.7G 18/
2.0G 19/
Next some system information..
$ uname -a
OpenBSD saturn 3.3 GENERIC#44 i386
$ gcc -v
Reading specs from
/usr/lib/gcc-lib/i386-unknown-openbsd3.3/2.95.3/specs
gcc version 2.95.3 20010125 (prerelease, propolice)
$ as -v
GNU assembler version 1.92.3, OpenBSD $Revision: 1.2 $
$ bison --version
bison (GNU Bison) 1.35
Copyright 1984, 1986, 1989, 1992, 2000, 2001, 2002
Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.
$ ra -h
Ra Version 2.0.5
And finally, the core analysis.
$ gdb /usr/local/bin/ra ra.core
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License,
and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for
details.
This GDB was configured as "i386-unknown-openbsd3.3"...
Core was generated by `ra'.
Program terminated with signal 6, Abort trap.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libm.so.1.0...done.
Reading symbols from /usr/lib/libc.so.29.0...done.
#0 0x400c5fcf in _thread_sys_kill ()
(gdb) where
#0 0x400c5fcf in _thread_sys_kill ()
#1 0x400c58bb in abort ()
#2 0x13cd5 in argus_filter_orig ()
#3 0x1399e in argus_filter ()
#4 0x5714 in ArgusHandleDatum ()
#5 0x72d0 in ArgusReadConnection ()
#6 0x548f in main ()
(gdb) n
The program is not being run.
(gdb) backtrace
#0 0x400c5fcf in _thread_sys_kill ()
#1 0x400c58bb in abort ()
#2 0x13cd5 in argus_filter_orig ()
#3 0x1399e in argus_filter ()
#4 0x5714 in ArgusHandleDatum ()
#5 0x72d0 in ArgusReadConnection ()
#6 0x548f in main ()
(gdb) info all-registers
eax 0x0 0
ecx 0x0 0
edx 0x2817 10263
ebx 0x400d8060 1074626656
esp 0xcfbf00a8 0xcfbf00a8
ebp 0xcfbf00d4 0xcfbf00d4
esi 0xcfbf00d0 -809566000
edi 0x40110000 1074855936
eip 0x400c5fcf 0x400c5fcf
eflags 0x292 658
cs 0x1f 31
ss 0x27 39
ds 0x27 39
es 0x27 39
fs 0x27 39
gs 0x27 39
(gdb) q
(gdb) run -ncr 1*/argus* - src net 10.20.0.0/16 and udp dst port 69 >> /tmp/foo
Starting program: /usr/local/bin/ra -ncr 1*/argus* - src net 10.20.0.0/16 and udp dst port 69 >> /tmp/foo
1
Program received signal SIGABRT, Aborted.
0x400c5fcf in _thread_sys_kill ()
(gdb) bt
#0 0x400c5fcf in _thread_sys_kill ()
#1 0x400c58bb in abort ()
#2 0x13cd5 in argus_filter_orig ()
#3 0x1399e in argus_filter ()
#4 0x5714 in ArgusHandleDatum ()
#5 0x72d0 in ArgusReadConnection ()
#6 0x548f in main ()
(gdb) where
#0 0x400c5fcf in _thread_sys_kill ()
#1 0x0 in ?? ()
(gdb) info all-registers
eax 0x0 0
ecx 0x0 0
edx 0x3819 14361
ebx 0x400d8060 1074626656
esp 0xcfbf0154 0xcfbf0154
ebp 0xcfbf0180 0xcfbf0180
esi 0xcfbf017c -809565828
edi 0x40110000 1074855936
eip 0x400c5fcf 0x400c5fcf
eflags 0x382 898
cs 0x1f 31
ss 0x27 39
ds 0x27 39
es 0x27 39
fs 0x27 39
gs 0x27 39
(gdb) q
Any help is appreciated.
Thanks.
- Eric
More information about the argus
mailing list