Random crashing with rc.40 on Linux

[carter at qosient.com]

Hmmmmm, not good!!!
I'll be back in my office today, and can start looking into this then!!  I'll try to put up new code this afternoon before I start my migration northward!!

This type of problem can be caused by a single packet, which may be unique to your network.  If its something that happens often, try having argus write out its own tcpdump file (variable in the argus.conf file) to capture the problem. If the file gets big, just remove it and argus will recreate it and keep going!

But as Peter suggested, running under gdb() and doing a back trace and looking at the packet that is the culprit, or  inserting some code to dump core in the ArgusLog() routine is the easiest way to get a view into what is going on!!!

If we can get the packet file, I can fix very quickly!!!

Carter
Carter Bullard
QoSient LLC
150 E. 57th Street Suite 12D
New York, New York 10022
+1 212 588-9133 Phone
+1 212 588-9134 Fax  

-----Original Message-----
From: "Scott A. McIntyre" <scott at xs4all.net>
Date: Wed, 07 Mar 2007 12:22:04 
To:argus-info at lists.andrew.cmu.edu
Subject: [ARGUS] Random crashing with rc.40 on Linux

Hi,


Since upgrading to rc40, my Argus seems to crash or exit regularly.  I
built with .debug touched and the only thing that shows up in the
daemon.logs for Linux are:

Mar  7 08:57:07  argus[24829]: 07 Mar 07 08:57:07.538966 started
Mar  7 08:57:07  argus[24829]: 07 Mar 07 08:57:07.539359
ArgusGetInterfaceStatus: interface eth1 is up
Mar  7 09:20:01  argus[24829]: 07 Mar 07 09:20:01.154647 ArgusAddToQueue
(0x83b15b4, 0x95abb50) obj in queue 0x83b15b4
Mar  7 09:20:01  argus[24829]: 07 Mar 07 09:20:01.253027 stopped


I invoked Argus with:

/usr/local/argus3/sbin/argus -d -F /usr/local/argus3/argus.conf

As I'd been doing for all previous RC's and only rc40 has shown this
behaviour.

Argus Version 3.0.0.rc.40

Anywhere else I should go to check for signs of what's causing this exit?

Scott