RC.39 'argus' segfault on Fedora Core 6

Peter Van Epp vanepp at sfu.ca
Tue Feb 27 17:04:43 EST 2007


On Tue, Feb 27, 2007 at 01:13:07PM -0800, Michael Hornung wrote:
> Same segfault in Rc.40:
> 
> (gdb) bt
> #0  0x080567f4 in ArgusCreateFlowKey ()
> #1  0x08051b83 in ArgusProcessPacket ()
> #2  0x08053b4d in ArgusEtherPacket ()
> #3  0x0805dfd8 in pcap_read_linux ()
> #4  0x08054d2e in ArgusGetPackets ()
> #5  0x0804bb24 in main ()
> 
> -Mike
> 
> On Tue, 27 Feb 2007 at 11:07, Michael Hornung wrote:
> 
> |Argus regularly segfaults after running for 20 minutes or so.  I ran in gdb
> |and:
> |
> |# gdb /usr/local/sbin/argus
> |GNU gdb Red Hat Linux (6.5-15.fc6rh)
> |...
> |(gdb) run
> |Starting program: /usr/local/sbin/argus
> |(no debugging symbols found)
> |(no debugging symbols found)
> |(no debugging symbols found)
> |(no debugging symbols found)
> |(no debugging symbols found)
> |(no debugging symbols found)
> |(no debugging symbols found)
> |argus[18372]: 27 Feb 07 10:48:42.610090 started
> |argus[18372]: 27 Feb 07 10:48:42.611904 ArgusGetInterfaceStatus: interface eth1
> |is up
> |(no debugging symbols found)
> |(no debugging symbols found)
> |argus[18372]: 27 Feb 07 10:48:46.247183 connect from W.X.Y.Z
> |
> |Program received signal SIGSEGV, Segmentation fault.
> |0x080565e4 in ArgusCreateFlowKey ()
> |(gdb) bt
> |#0  0x080565e4 in ArgusCreateFlowKey ()
> |#1  0x08051983 in ArgusProcessPacket ()
> |#2  0x0805374d in ArgusEtherPacket ()
> |#3  0x0805de38 in pcap_read_linux ()
> |#4  0x08054940 in ArgusGetPackets ()
> |#5  0x0804ba54 in main ()
> |
> |Would any other information be helpful?
> |I'll load RC.40 and see if this is resolved.
> |
> |-Mike
> |

	Hmmm, don't see this on Suse 10.2 (but on IBM G5 with the pf-ring code
instead of standard pcap) rc.39 has been running for weeks and rc.40 since
last night without problem. If you 

touch .devel
touch .debug
./configure
make clean 
make

in the top argus directory it will compile with debug symbols which will 
get interesting data if you type "where" at the gdb prompt.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada



More information about the argus mailing list