ragraph

CS Lee geek00l at gmail.com
Tue Oct 17 10:23:53 EDT 2006


Hey all,

I have core dump on perl when running ragraph against my argus file, I used
this pcap to generate the argus data,

shell>capinfos strange-broadcast-10000.pcap
File name: strange-broadcast-10000.pcap
File type: libpcap (tcpdump, Ethereal, etc.)
Number of packets: 10000
File size: 10536710 bytes
Data size: 10376686 bytes
Capture duration: 3.502725 seconds
Start time: Fri Oct 6 01:09:52 2006
End time: Fri Oct 6 01:09:55 2006

You can see that the pcap file time line is between 01:09:52 to 01:09:55
which is around 3 seconds +, If I run ragraph with this option -

shell>ragraph bytes proto -M 60s -r strange-broadcast-10000.argus -fill
-stack -w ./strange-broadcast-10000.png
Segmentation fault: 11 (core dumped)

I have core dump on perl 5.8.8. Since my data timeline is just 3 seconds and
I shouldn't have using 60s which is 1 Minute, however I don't think it
should generate core dump but instead report the error indeed. If i use this
command line with -M 1s, ragraph runs well and generate the graph properly.

shell>ragraph bytes proto -M 1s -r strange-broadcast-10000.argus -fill
-stack -w ./strange-broadcast-10000.png

shell>ls -la strange-broadcast-10000.png
-rw-r--r-- 1 root wheel 28667 Oct 17 21:26 strange-broadcast-10000.png

By the way I'm on FreeBSD platform.

Thanks.

-- 
Best Regards,

CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20061017/c22820f9/attachment.html>


More information about the argus mailing list