ra dies off doing analysis

Carter Bullard carter at qosient.com
Mon Sep 1 21:29:43 EDT 2003


Hey Eric,
   There is a shell script called argusbug, and is very good
at collecting the information that you provided.  We all are
suppose to be using it, so give it a try.

   At this point, the best recourse is to try to find the file
that is causing the problem.  Once you've found that, then
run racount() with the same parameters to see if its all
the programs, or just ra().  Then the method of choice is
o whitling it down to a usable size, where it still
generates the bug, and then possibly sharing the file so
we can debug it on the list.

   If its in the filter, which is rather complex to debug,
one thing to do is to use the '-b' option to see what
the compiler is actually generating.  That really can
help.

Carter



> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Eric
> Sent: Thursday, August 28, 2003 8:45 PM
> To: argus-info at lists.andrew.cmu.edu
> Subject: ra dies off doing analysis
>
>
> I've got a core from ra.
>
> First, here's the sizes of the files I'm processing
>
> $ du -h 1*/
> 2.5G    10/
> 2.0G    11/
> 2.3G    12/
> 1.5G    13/
> 683M    14/
> 1.4G    15/
> 2.2G    16/
> 567M    17/
> 1.7G    18/
> 2.0G    19/
>
> Next some system information..
>
> $ uname -a
> OpenBSD saturn 3.3 GENERIC#44 i386
>
> $ gcc -v
> Reading specs from
> /usr/lib/gcc-lib/i386-unknown-openbsd3.3/2.95.3/specs
> gcc version 2.95.3 20010125 (prerelease, propolice)
>
> $ as -v
> GNU assembler version 1.92.3, OpenBSD $Revision: 1.2 $
>
> $ bison --version
> bison (GNU Bison) 1.35
>
> Copyright 1984, 1986, 1989, 1992, 2000, 2001, 2002
> Free Software Foundation, Inc.
> This is free software; see the source for copying conditions.
> There is NO warranty; not even for MERCHANTABILITY or FITNESS
> FOR A PARTICULAR
> PURPOSE.
>
> $ ra -h
> Ra Version 2.0.5
>
>
> And finally, the core analysis.
>
> $ gdb /usr/local/bin/ra ra.core
> GNU gdb 4.16.1
> Copyright 1996 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License,
> and you are
> welcome to change it and/or distribute copies of it under certain
> conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB.  Type "show warranty" for
> details.
> This GDB was configured as "i386-unknown-openbsd3.3"...
> Core was generated by `ra'.
> Program terminated with signal 6, Abort trap.
> Reading symbols from /usr/libexec/ld.so...done.
> Reading symbols from /usr/lib/libm.so.1.0...done.
> Reading symbols from /usr/lib/libc.so.29.0...done.
> #0  0x400c5fcf in _thread_sys_kill ()
> (gdb) where
> #0  0x400c5fcf in _thread_sys_kill ()
> #1  0x400c58bb in abort ()
> #2  0x13cd5 in argus_filter_orig ()
> #3  0x1399e in argus_filter ()
> #4  0x5714 in ArgusHandleDatum ()
> #5  0x72d0 in ArgusReadConnection ()
> #6  0x548f in main ()
> (gdb) n
> The program is not being run.
> (gdb) backtrace
> #0  0x400c5fcf in _thread_sys_kill ()
> #1  0x400c58bb in abort ()
> #2  0x13cd5 in argus_filter_orig ()
> #3  0x1399e in argus_filter ()
> #4  0x5714 in ArgusHandleDatum ()
> #5  0x72d0 in ArgusReadConnection ()
> #6  0x548f in main ()
> (gdb) info all-registers
> eax            0x0      0
> ecx            0x0      0
> edx            0x2817   10263
> ebx            0x400d8060       1074626656
> esp            0xcfbf00a8       0xcfbf00a8
> ebp            0xcfbf00d4       0xcfbf00d4
> esi            0xcfbf00d0       -809566000
> edi            0x40110000       1074855936
> eip            0x400c5fcf       0x400c5fcf
> eflags         0x292    658
> cs             0x1f     31
> ss             0x27     39
> ds             0x27     39
> es             0x27     39
> fs             0x27     39
> gs             0x27     39
> (gdb) q
>
> (gdb) run -ncr 1*/argus* - src net 10.20.0.0/16 and udp dst
> port 69 >> /tmp/foo
> Starting program: /usr/local/bin/ra -ncr 1*/argus* - src net
> 10.20.0.0/16 and udp dst port 69 >> /tmp/foo
> 1
> Program received signal SIGABRT, Aborted.
> 0x400c5fcf in _thread_sys_kill ()
> (gdb) bt
> #0  0x400c5fcf in _thread_sys_kill ()
> #1  0x400c58bb in abort ()
> #2  0x13cd5 in argus_filter_orig ()
> #3  0x1399e in argus_filter ()
> #4  0x5714 in ArgusHandleDatum ()
> #5  0x72d0 in ArgusReadConnection ()
> #6  0x548f in main ()
> (gdb) where
> #0  0x400c5fcf in _thread_sys_kill ()
> #1  0x0 in ?? ()
> (gdb) info all-registers
> eax            0x0      0
> ecx            0x0      0
> edx            0x3819   14361
> ebx            0x400d8060       1074626656
> esp            0xcfbf0154       0xcfbf0154
> ebp            0xcfbf0180       0xcfbf0180
> esi            0xcfbf017c       -809565828
> edi            0x40110000       1074855936
> eip            0x400c5fcf       0x400c5fcf
> eflags         0x382    898
> cs             0x1f     31
> ss             0x27     39
> ds             0x27     39
> es             0x27     39
> fs             0x27     39
> gs             0x27     39
> (gdb) q
>
>
> Any help is appreciated.
>
> Thanks.
>
> - Eric
>






More information about the argus mailing list