ragraph
CS Lee
geek00l at gmail.com
Tue Oct 17 10:23:53 EDT 2006
Hey all,
I have core dump on perl when running ragraph against my argus file, I used
this pcap to generate the argus data,
shell>capinfos strange-broadcast-10000.pcap
File name: strange-broadcast-10000.pcap
File type: libpcap (tcpdump, Ethereal, etc.)
Number of packets: 10000
File size: 10536710 bytes
Data size: 10376686 bytes
Capture duration: 3.502725 seconds
Start time: Fri Oct 6 01:09:52 2006
End time: Fri Oct 6 01:09:55 2006
You can see that the pcap file time line is between 01:09:52 to 01:09:55
which is around 3 seconds +, If I run ragraph with this option -
shell>ragraph bytes proto -M 60s -r strange-broadcast-10000.argus -fill
-stack -w ./strange-broadcast-10000.png
Segmentation fault: 11 (core dumped)
I have core dump on perl 5.8.8. Since my data timeline is just 3 seconds and
I shouldn't have using 60s which is 1 Minute, however I don't think it
should generate core dump but instead report the error indeed. If i use this
command line with -M 1s, ragraph runs well and generate the graph properly.
shell>ragraph bytes proto -M 1s -r strange-broadcast-10000.argus -fill
-stack -w ./strange-broadcast-10000.png
shell>ls -la strange-broadcast-10000.png
-rw-r--r-- 1 root wheel 28667 Oct 17 21:26 strange-broadcast-10000.png
By the way I'm on FreeBSD platform.
Thanks.
--
Best Regards,
CS Lee<geekooL[at]gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20061017/c22820f9/attachment.html>
More information about the argus
mailing list