ra dies off doing analysis
Carter Bullard
carter at qosient.com
Mon Sep 1 21:29:43 EDT 2003
Hey Eric,
There is a shell script called argusbug, and is very good
at collecting the information that you provided. We all are
suppose to be using it, so give it a try.
At this point, the best recourse is to try to find the file
that is causing the problem. Once you've found that, then
run racount() with the same parameters to see if its all
the programs, or just ra(). Then the method of choice is
o whitling it down to a usable size, where it still
generates the bug, and then possibly sharing the file so
we can debug it on the list.
If its in the filter, which is rather complex to debug,
one thing to do is to use the '-b' option to see what
the compiler is actually generating. That really can
help.
Carter
> -----Original Message-----
> From: owner-argus-info at lists.andrew.cmu.edu
> [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of Eric
> Sent: Thursday, August 28, 2003 8:45 PM
> To: argus-info at lists.andrew.cmu.edu
> Subject: ra dies off doing analysis
>
>
> I've got a core from ra.
>
> First, here's the sizes of the files I'm processing
>
> $ du -h 1*/
> 2.5G 10/
> 2.0G 11/
> 2.3G 12/
> 1.5G 13/
> 683M 14/
> 1.4G 15/
> 2.2G 16/
> 567M 17/
> 1.7G 18/
> 2.0G 19/
>
> Next some system information..
>
> $ uname -a
> OpenBSD saturn 3.3 GENERIC#44 i386
>
> $ gcc -v
> Reading specs from
> /usr/lib/gcc-lib/i386-unknown-openbsd3.3/2.95.3/specs
> gcc version 2.95.3 20010125 (prerelease, propolice)
>
> $ as -v
> GNU assembler version 1.92.3, OpenBSD $Revision: 1.2 $
>
> $ bison --version
> bison (GNU Bison) 1.35
>
> Copyright 1984, 1986, 1989, 1992, 2000, 2001, 2002
> Free Software Foundation, Inc.
> This is free software; see the source for copying conditions.
> There is NO warranty; not even for MERCHANTABILITY or FITNESS
> FOR A PARTICULAR
> PURPOSE.
>
> $ ra -h
> Ra Version 2.0.5
>
>
> And finally, the core analysis.
>
> $ gdb /usr/local/bin/ra ra.core
> GNU gdb 4.16.1
> Copyright 1996 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License,
> and you are
> welcome to change it and/or distribute copies of it under certain
> conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB. Type "show warranty" for
> details.
> This GDB was configured as "i386-unknown-openbsd3.3"...
> Core was generated by `ra'.
> Program terminated with signal 6, Abort trap.
> Reading symbols from /usr/libexec/ld.so...done.
> Reading symbols from /usr/lib/libm.so.1.0...done.
> Reading symbols from /usr/lib/libc.so.29.0...done.
> #0 0x400c5fcf in _thread_sys_kill ()
> (gdb) where
> #0 0x400c5fcf in _thread_sys_kill ()
> #1 0x400c58bb in abort ()
> #2 0x13cd5 in argus_filter_orig ()
> #3 0x1399e in argus_filter ()
> #4 0x5714 in ArgusHandleDatum ()
> #5 0x72d0 in ArgusReadConnection ()
> #6 0x548f in main ()
> (gdb) n
> The program is not being run.
> (gdb) backtrace
> #0 0x400c5fcf in _thread_sys_kill ()
> #1 0x400c58bb in abort ()
> #2 0x13cd5 in argus_filter_orig ()
> #3 0x1399e in argus_filter ()
> #4 0x5714 in ArgusHandleDatum ()
> #5 0x72d0 in ArgusReadConnection ()
> #6 0x548f in main ()
> (gdb) info all-registers
> eax 0x0 0
> ecx 0x0 0
> edx 0x2817 10263
> ebx 0x400d8060 1074626656
> esp 0xcfbf00a8 0xcfbf00a8
> ebp 0xcfbf00d4 0xcfbf00d4
> esi 0xcfbf00d0 -809566000
> edi 0x40110000 1074855936
> eip 0x400c5fcf 0x400c5fcf
> eflags 0x292 658
> cs 0x1f 31
> ss 0x27 39
> ds 0x27 39
> es 0x27 39
> fs 0x27 39
> gs 0x27 39
> (gdb) q
>
> (gdb) run -ncr 1*/argus* - src net 10.20.0.0/16 and udp dst
> port 69 >> /tmp/foo
> Starting program: /usr/local/bin/ra -ncr 1*/argus* - src net
> 10.20.0.0/16 and udp dst port 69 >> /tmp/foo
> 1
> Program received signal SIGABRT, Aborted.
> 0x400c5fcf in _thread_sys_kill ()
> (gdb) bt
> #0 0x400c5fcf in _thread_sys_kill ()
> #1 0x400c58bb in abort ()
> #2 0x13cd5 in argus_filter_orig ()
> #3 0x1399e in argus_filter ()
> #4 0x5714 in ArgusHandleDatum ()
> #5 0x72d0 in ArgusReadConnection ()
> #6 0x548f in main ()
> (gdb) where
> #0 0x400c5fcf in _thread_sys_kill ()
> #1 0x0 in ?? ()
> (gdb) info all-registers
> eax 0x0 0
> ecx 0x0 0
> edx 0x3819 14361
> ebx 0x400d8060 1074626656
> esp 0xcfbf0154 0xcfbf0154
> ebp 0xcfbf0180 0xcfbf0180
> esi 0xcfbf017c -809565828
> edi 0x40110000 1074855936
> eip 0x400c5fcf 0x400c5fcf
> eflags 0x382 898
> cs 0x1f 31
> ss 0x27 39
> ds 0x27 39
> es 0x27 39
> fs 0x27 39
> gs 0x27 39
> (gdb) q
>
>
> Any help is appreciated.
>
> Thanks.
>
> - Eric
>
More information about the argus
mailing list