new software on the server, ..., almost done
Peter Van Epp
vanepp at sfu.ca
Sun Sep 9 19:24:46 EDT 2007
Well progress of sorts here. After a long fight I managed to get
OpenBSD 4.1 installed on a machine here and installed the latest argus and
argus-clients.rc.53. Then did a capture from the OpenBSD machine on my adsl
link with a second machine doing a tcpdump of the link from a hub. Indeed
OpenBSD is unhappy with memory allocation which probably indicates a bug.
I've attached a listing of the ra run with -D8 set and the link.tcp
and link.argus files to see if that indicates where the problem lies (it would
seem to be in clients, but who knows :-). In both cases no .threads defined.
Script started on Sun Sep 9 08:42:24 2007
# argus -dJ -i ep1 -w test.argus
# ping fraser.sfu.ca
PING fraser.sfu.ca (142.58.101.25): 56 data bytes
64 bytes from 142.58.101.25: icmp_seq=0 ttl=246 time=17.956 ms
64 bytes from 142.58.101.25: icmp_seq=1 ttl=246 time=16.494 ms
64 bytes from 142.58.101.25: icmp_seq=2 ttl=246 time=16.829 ms
64 bytes from 142.58.101.25: icmp_seq=3 ttl=246 time=17.155 ms
64 bytes from 142.58.101.25: icmp_seq=4 ttl=246 time=16.746 ms
64 bytes from 142.58.101.25: icmp_seq=5 ttl=246 time=17.541 ms
64 bytes from 142.58.101.25: icmp_seq=6 ttl=246 time=17.155 ms
64 bytes from 142.58.101.25: icmp_seq=7 ttl=246 time=17.690 ms
64 bytes from 142.58.101.25: icmp_seq=8 ttl=246 time=17.278 ms
64 bytes from 142.58.101.25: icmp_seq=9 ttl=246 time=16.637 ms
64 bytes from 142.58.101.25: icmp_seq=10 ttl=246 time=16.963 ms
64 bytes from 142.58.101.25: icmp_seq=11 ttl=246 time=16.791 ms
64 bytes from 142.58.101.25: icmp_seq=12 ttl=246 time=16.371 ms
64 bytes from 142.58.101.25: icmp_seq=13 ttl=246 time=16.446 ms
64 bytes from 142.58.101.25: icmp_seq=14 ttl=246 time=17.250 ms
64 bytes from 142.58.101.25: icmp_seq=15 ttl=246 time=16.842 ms
64 bytes from 142.58.101.25: icmp_seq=16 ttl=246 time=16.925 ms
64 bytes from 142.58.101.25: icmp_seq=17 ttl=246 time=17.512 ms
64 bytes from 142.58.101.25: icmp_seq=18 ttl=246 time=16.828 ms
^C
--- fraser.sfu.ca ping statistics ---
19 packets transmitted, 19 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 16.371/17.021/17.956/0.444 ms
# ps auxwww | grep argus
root 19217 0.0 0.2 1628 1576 ?? Ss 8:42AM 0:00.02 argus -dJ -i ep1 -w test.argus
# kill -HUP 19217
# ra -r test.argus -n
08:42:55.400809 e arp 206.116.0.36 who 206.116.0.254 1 0 42 0 INT
08:43:00.410145 e arp 206.116.0.36 who 206.116.0.254 1 0 42 0 INT
08:43:00.429244 e arp 206.116.0.36 who 206.116.0.254 1 0 60 0 INT
08:43:00.429278 e udp 206.116.0.36.6721 <-> 154.11.128.187.53 1 1 73 200 CON
08:43:00.461999 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:01.470096 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:02.480041 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:03.490037 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:04.500030 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:05.510044 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:06.520075 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:07.530042 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:08.540035 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:09.550035 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:10.560039 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:11.570055 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:12.580037 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:13.590036 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:14.600042 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:15.610038 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:16.620049 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:17.630050 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:18.640040 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
08:43:38.610778 e arp 206.116.224.254 who 206.116.226.53 2 0 120 0 INT
08:43:43.920444 man 0 0 15 1 45 25 15 879448 STP
ra in free(): error: free_pages: pointer to wrong page
Abort trap (core dumped)
# mount /dev/fd0a /mnt
# ls
argus-3.0.0 ra.core
argus-3.0.0.tar test.argus
argus-clients-3.0.0.rc.53 test.log
argus-clients-3.0.0.rc.53.tar
# ls /mnt
boot bsd link.tcp
# cp /mnt/link.tcp ./
# argus -r link.tcp -w link.argus
argus: Time 0.003190 Flows 25 Closed 25 Sends 27 BSends 0
Updates 47 Cache 22
Total Memory 52 Free 45 MaxBytes 881884
Source: link.tcp
Total Pkts 47 Rate 14733.542320
# ra -r link.argus -n
03:49:05.276098 e arp 206.116.112.254 who 206.116.112.162 1 0 60 0 INT
03:49:14.239023 e arp 206.116.112.254 who 206.116.112.162 1 0 60 0 INT
03:50:05.314806 e arp 206.116.0.36 who 206.116.0.254 1 0 60 0 INT
03:50:05.333538 e arp 206.116.0.36 who 206.116.0.254 1 0 60 0 INT
03:50:05.333990 e udp 206.116.0.36.6721 <-> 154.11.128.187.53 1 1 73 200 CON
03:50:05.366761 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:06.375033 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:07.385128 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:08.395264 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:09.405409 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:10.415582 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:11.425763 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:12.431004 e udp 221.208.208.89.40185 -> 206.116.119.250.1027 1 0 500 0 INT
03:50:12.435881 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:13.446027 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:14.456173 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:15.466322 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:16.476492 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:17.486624 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:18.496770 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:19.506939 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:20.517079 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:21.527237 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:22.537405 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:23.547539 e icmp 206.116.0.36 <-> 142.58.101.25 1 1 98 98 ECO
03:50:43.520765 e arp 206.116.224.254 who 206.116.226.53 2 0 120 0 INT
08:47:15.674709 man 0 0 16 1 47 27 16 881884 STP
ra in free(): error: free_pages: pointer to wrong page
Abort trap (core dumped)
# exit
Script done on Sun Sep 9 08:47:35 2007
Script started on Sun Sep 9 08:57:00 2007
# gdb ra ra.core
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-openbsd4.1"...
Core was generated by `ra'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/lib/libm.so.2.3...done.
Loaded symbols for /usr/lib/libm.so.2.3
Reading symbols from /usr/lib/libreadline.so.3.0...done.
Loaded symbols for /usr/lib/libreadline.so.3.0
Reading symbols from /usr/lib/libtermcap.so.10.0...done.
Loaded symbols for /usr/lib/libtermcap.so.10.0
Reading symbols from /usr/lib/libc.so.40.3...done.
Loaded symbols for /usr/lib/libc.so.40.3
Reading symbols from /usr/libexec/ld.so...done.
Loaded symbols for /usr/libexec/ld.so
#0 0x0fff752d in kill () from /usr/lib/libc.so.40.3
(gdb) where
#0 0x0fff752d in kill () from /usr/lib/libc.so.40.3
#1 0x1002fc37 in abort () at /usr/src/lib/libc/stdlib/abort.c:65
#2 0x100171a9 in wrterror (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:495
#3 0x1001726b in wrtwarning (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:505
#4 0x1001836b in free_pages (ptr=0x3c00d428, index=245785, info=0x0)
at /usr/src/lib/libc/stdlib/malloc.c:1384
#5 0x10018e68 in ifree (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1835
#6 0x1001903d in free (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1903
#7 0x1c04161b in ArgusCloseParser (parser=0x88879000) at argus_parser.c:174
#8 0x1c00346c in main (argc=5, argv=0xcfbc22f8) at argus_main.c:359
(gdb) up
#1 0x1002fc37 in abort () at /usr/src/lib/libc/stdlib/abort.c:65
65 /usr/src/lib/libc/stdlib/abort.c: No such file or directory.
in /usr/src/lib/libc/stdlib/abort.c
(gdb) up
#2 0x100171a9 in wrterror (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:495
495 /usr/src/lib/libc/stdlib/malloc.c: No such file or directory.
in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#3 0x1001726b in wrtwarning (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:505
505 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#4 0x1001836b in free_pages (ptr=0x3c00d428, index=245785, info=0x0)
at /usr/src/lib/libc/stdlib/malloc.c:1384
1384 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#5 0x10018e68 in ifree (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1835
1835 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#6 0x1001903d in free (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1903
1903 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#7 0x1c04161b in ArgusCloseParser (parser=0x88879000) at argus_parser.c:174
174 free (parser->RaTimeFormat);
(gdb) print parser->RaTimeFormat
$1 = 0x3c00d428 "%T.%f"
(gdb) print *parser
$2 = {status = 0, RaParseCompleting = 0, RaParseDone = 2, RaDonePending = 0,
RaTasksToDo = 0, ArgusReliableConnection = 0,
ArgusProgramName = 0x8a3c9000 "ra", RaTimeFormat = 0x3c00d428 "%T.%f",
RaTimeZone = 0x0, ArgusProgramArgs = 0x7ca10060 "ra -r link.argus -D8 -n ",
ArgusProgramOptions = 0x7ca10080 "-r link.argus -D8 -n", ArgusRealTime = {
tv_sec = 1189353355, tv_usec = 342050}, ArgusGlobalTime = {
tv_sec = 1189352835, tv_usec = 662647}, RaClientTimeout = {tv_sec = 1,
tv_usec = 0}, RaClientUpdate = {tv_sec = 0, tv_usec = 0}, RaStartTime = {
tv_sec = 881884, tv_usec = 0}, RaEndTime = {tv_sec = 1189335043,
tv_usec = 520765}, RaStartFilter = {tm_sec = 0, tm_min = 0, tm_hour = 0,
tm_mday = 0, tm_mon = 0, tm_year = 0, tm_wday = 0, tm_yday = 0,
tm_isdst = 0, tm_gmtoff = 0, tm_zone = 0x0}, RaLastFilter = {tm_sec = 0,
tm_min = 0, tm_hour = 0, tm_mday = 0, tm_mon = 0, tm_year = 0,
tm_wday = 0, tm_yday = 0, tm_isdst = 0, tm_gmtoff = 0, tm_zone = 0x0},
RaTmStruct = 0x2ffed4e0, tcount = 0, remote = {{
input = 0x0} <repeats 128 times>}, ArgusSessionId = 0,
NonBlockingDNS = 0, ArgusPidFile = 0x0, ArgusPidPath = 0x0, ns = 0x0,
ArgusOutput = 0x0, ArgusOutputList = 0x7ca10040,
ArgusInputList = 0x7ca10020, ArgusNameList = 0x0,
ArgusRemoteHosts = 0x8a3c9010, ArgusActiveHosts = 0x8a3c9020,
ArgusHostsActive = 0, ArgusMaxListen = 0, ArgusLfd = 0, ArgusAdjustTime = 0,
ArgusConnectTime = 0, ArgusReverse = 0, ArgusPrintXml = 0,
RadiumArchive = 0x0, ArgusID = 0, ArgusIDType = 0, ArgusReportTime = {
tv_sec = 0, tv_usec = 0}, ArgusUpdateInterval = {tv_sec = 0, tv_usec = 0},
---Type <return> to continue, or q <return> to quit---
ArgusMarReportInterval = {tv_sec = 0, tv_usec = 0}, ArgusTotalRecords = 28,
ArgusTotalMarRecords = 2, ArgusTotalFarRecords = 26, ArgusTotalPkts = 47,
ArgusTotalSrcPkts = 0, ArgusTotalDstPkts = 0, ArgusTotalBytes = 4857,
ArgusTotalSrcBytes = 0, ArgusTotalDstBytes = 0, aflag = 0 '\0',
Aflag = 0 '\0', bflag = 0 '\0', Bflag = 0 '\0', cflag = 0 '\0',
Cflag = 0 '\0', dflag = 0 '\0', Dflag = 0 '\0', eflag = 0 '\0',
Eflag = 0 '\0', fflag = 0 '\0', Fflag = 0 '\0', gflag = 0 '\0',
Gflag = 0 '\0', Hflag = 0 '\0', idflag = 0 '\0', jflag = 0 '\0',
lflag = 0 '\0', Lflag = 0 '\0', mflag = 0 '\0', notNetflag = 0 '\0',
Oflag = 1 '\001', pflag = 6 '\006', Pflag = 0 '\0', qflag = 0 '\0',
Qflag = 0 '\0', Netflag = 0 '\0', nflag = 2 '\002', Normflag = 0 '\0',
Pctflag = 0 '\0', pidflag = 0 '\0', tflag = 0 '\0', uflag = 0 '\0',
Wflag = 0 '\0', vflag = 0 '\0', Vflag = 0 '\0', iflag = 0 '\0',
Iflag = 0 '\0', Tflag = 0 '\0', rflag = 1 '\001', Rflag = 0 '\0',
Sflag = 0 '\0', xflag = 0 '\0', Xflag = 0 '\0', XMLflag = 0 '\0',
zflag = 0 '\0', Zflag = 0 '\0', debugflag = 8, RaInitialized = 1,
RaFieldDelimiter = 0 '\0', RaFieldQuoted = 0 '\0', RaFieldWidth = 0 '\0',
RaWriteOut = 0 '\0', Pauseflag = 0, hfield = 15, prfield = 6, pfield = 7,
Uflag = 0, sNflag = -1, eNflag = -1, startime_t = 2147483647,
lasttime_t = 0, timeout = 0, estr = 0x0, Hstr = 0x0, Mflag = 0x0,
sflag = 0x0, RaLabelStr = '\0' <repeats 65535 times>, RaLabel = 0x0,
ArgusRandomSeed = 0, RaLabelCounter = 0, RaSOptionIndex = 0,
RaSOptionStrings = {0x0 <repeats 134 times>}, ArgusFilterFiledes = {0, 0},
ArgusControlFiledes = {0, 0}, RaCumulativeMerge = 0,
---Type <return> to continue, or q <return> to quit---
RaFlowMajorModified = 0, RaAllocHashTableHeaders = 0,
RaAllocArgusRecord = 0, RaThisActiveIndex = 0, RaThisFlowNum = 0,
RaThisModelNum = 0, RaParseError = 0, ArgusMinuteUpdate = 0,
ArgusHourlyUpdate = 0, RaHistoMetricSeries = 0, RaHistoMetricLog = 0,
RaHistoLogInterval = 0, RaHistoBinSize = 0, RaHistoStart = 0,
RaHistoStartLog = 0, RaHistoEnd = 0, RaHistoEndLog = 0,
RaHistoRecords = 0x0, ArgusPortNum = 0, RaHistoBins = 0, RaCloseInputFd = 1,
RaPollMode = 0, RaAgMode = 0, RaMonMode = 0, RaZeroMode = 0,
RaPrintMode = 0, RaCursesMode = 0, RaPrintIndex = 128, RaExplicitDate = 0,
RaWildCardDate = 0, RaFlowModelFile = 0x0, exceptfile = 0x0, projstr = 0x0,
dbustr = 0x0, dbpstr = 0x0, ustr = 0x0, pstr = 0x0, timearg = 0x0,
wfile = 0x0, ArgusFlowModelFile = 0x0, ArgusLocalFilter = 0x0,
ArgusRemoteFilter = 0x0, ArgusDisplayFilter = 0x0, ArgusBindAddr = 0x0,
ArgusFilterCode = {bf_len = 0, bf_insns = 0x0}, ArgusDisplayCode = {
bf_len = 0, bf_insns = 0x0}, RaFlowModel = 0x0, ArgusCIDRBuffer = {
type = 0 '\0', len = 0 '\0', masklen = 0 '\0', pad = 0 '\0', addr = {0, 0,
0, 0}, mask = {0, 0, 0, 0}, str = 0x0}, ArgusCIDRPtr = 0x888896fc,
ArgusModeList = 0x0, ArgusMaskList = 0x0, ArgusInputFileList = 0x0,
ArgusRemoteHostList = 0x0, ArgusCurrentFile = 0x0, ArgusWfileList = 0x0,
RaPrintAlgorithm = 0, RaDebugString = '\0' <repeats 4095 times>, argus = {
qhdr = {nxt = 0x0, prv = 0x0, queue = 0x0, lasttime = {tv_sec = 0,
tv_usec = 0}, logtime = {tv_sec = 0, tv_usec = 0}}, status = 0,
dsrindex = 0, trans = 0, timeout = 0, idle = 0, bins = 0x0, htblhdr = 0x0,
nsq = 0x0, input = 0x0, dsrs = {0x0 <repeats 18 times>}, hdr = {
---Type <return> to continue, or q <return> to quit---
type = 0 '\0', cause = 0 '\0', len = 0}, canon = {hdr = {type = 0 '\0',
cause = 0 '\0', len = 0}, flow = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {ipv6 = {ip_src = {
0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0,
ip_p = 0, sport = 0, dport = 0}, ip = {ip_src = 0, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0, pad = 0},
mac = {ehdr = {ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0,
type = 0 '\0', code = 0 '\0', id = 0}, icmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', id = 0, ip_id = 0}, igmpv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0,
type = 0 '\0', code = 0 '\0', pad = 0}, igmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0,
spi = 0}, esp = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0, arp_tpa = 0,
haddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
---Type <return> to continue, or q <return> to quit---
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, rarp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}, dhaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 0,
hln = 0 '\0', pln = 0 '\0', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
---Type <return> to continue, or q <return> to quit---
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, larp = {arp_spa = 0,
arp_tpa = 0, etheraddr = "\000\000\000\000\000", pad = 0},
lrarp = {arp_tpa = 0, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, flow = 0, resv = 0, ip_p = 0,
ip_id = 0}, frag = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = {0, 0}, ip_id = 0}}}, trans = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, srcid = {
ar_addr_un = {value = 0, ipv4 = 0}}, seqnum = 0}, time = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
start = {tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}},
dst = {start = {tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0,
tv_usec = 0}}}, encaps = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, src = 0, dst = 0}, attr = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
ttl = 0 '\0', tos = 0 '\0', ip_id = 0, options = 0}, dst = {
ttl = 0 '\0', tos = 0 '\0', ip_id = 0, options = 0}}, metric = {
---Type <return> to continue, or q <return> to quit---
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
pkts = 0, bytes = 0, appbytes = 0}, dst = {pkts = 0, bytes = 0,
appbytes = 0}}, net = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, net_union = {tcpinit = {status = 0,
seqbase = 0, options = 0, win = 0, flags = 0 '\0',
winshift = 0 '\0'}, tcpstatus = {status = 0, src = 0 '\0',
dst = 0 '\0', pad = "\000"}, tcp = {status = 0, state = 0,
options = 0, synAckuSecs = 0, ackDatauSecs = 0, src = {lasttime = {
tv_sec = 0, tv_usec = 0}, status = 0, seqbase = 0, seq = 0,
ack = 0, winnum = 0, bytes = 0, retrans = 0, ackbytes = 0,
state = 0, win = 0, winbytes = 0, flags = 0 '\0',
winshift = 0 '\0'}, dst = {lasttime = {tv_sec = 0, tv_usec = 0},
status = 0, seqbase = 0, seq = 0, ack = 0, winnum = 0,
bytes = 0, retrans = 0, ackbytes = 0, state = 0, win = 0,
winbytes = 0, flags = 0 '\0', winshift = 0 '\0'}}, icmp = {
icmp_type = 0 '\0', icmp_code = 0 '\0', iseq = 0, osrcaddr = 0,
odstaddr = 0, isrcaddr = 0, idstaddr = 0, igwaddr = 0}, icmpv6 = {
icmp_type = 0 '\0', icmp_code = 0 '\0', cksum = 0}, rtp = {
state = 0, src = {rh_cc = 0 '\0', rh_x = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_mark = 0 '\0', rh_seq = 0,
rh_time = 0, rh_ssrc = 0}, dst = {rh_cc = 0 '\0', rh_x = 0 '\0',
rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0',
---Type <return> to continue, or q <return> to quit---
rh_mark = 0 '\0', rh_seq = 0, rh_time = 0, rh_ssrc = 0},
sdrop = 0, ddrop = 0, ssdev = 0, dsdev = 0}, rtcp = {src = {
rh_rc = 0 '\0', rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0',
rh_len = 0, rh_ssrc = 0}, dst = {rh_rc = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_len = 0, rh_ssrc = 0},
sdrop = 0, ddrop = 0}, igmp = {igmp_type = 0 '\0',
igmp_code = 0 '\0', igmp_group = 0, jdelay = {tv_sec = 0,
tv_usec = 0}, ldelay = {tv_sec = 0, tv_usec = 0}}, dhcp = {
respaddr = 0}, esp = {status = 0, spi = 0, lastseq = 0,
lostseq = 0}, arp = {respaddr = "\000\000\000\000\000", pad = 0},
ah = {src_spi = 0, dst_spi = 0, src_replay = 0, dst_replay = 0},
frag = {fragnum = 0, frag_id = 0, totlen = 0, currlen = 0,
maxfraglen = 0, pad = 0}}}, mac = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, mac_union = {ether = {ehdr = {
ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}}}, vlan = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, sid = 0, did = 0}, mpls = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}},
slabel = 0, dlabel = 0}, icmp = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
---Type <return> to continue, or q <return> to quit---
len = 0 '\0'}, vl16 = {len = 0}}}, icmp_type = 0 '\0',
icmp_code = 0 '\0', iseq = 0, osrcaddr = 0, odstaddr = 0,
isrcaddr = 0, idstaddr = 0, igwaddr = 0}, agr = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, count = 0, laststartime = {
tv_sec = 0, tv_usec = 0}, lasttime = {tv_sec = 0, tv_usec = 0},
act = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}, idle = {
n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}}, jitter = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, act = {
src = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0},
dst = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}},
idle = {src = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0},
dst = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}}},
psize = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, src = {psizemin = 0, psizemax = 0}, dst = {
psizemin = 0, psizemax = 0}}, data = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, size = 0, count = 0,
array = "\000\000\000\000\000\000\000"}}, srate = 0, drate = 0,
sload = 0, dload = 0, dur = 0, avgdur = 0, sploss = 0, dploss = 0,
offset = 0}, canon = {hdr = {type = 0 '\0', cause = 0 '\0', len = 0},
flow = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
---Type <return> to continue, or q <return> to quit---
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {
ipv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, flow = 0,
blank = 0, ip_p = 0, sport = 0, dport = 0}, ip = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0,
pad = 0}, mac = {ehdr = {ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0, type = 0 '\0',
code = 0 '\0', id = 0}, icmp = {ip_src = 0, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0', code = 0 '\0', id = 0,
ip_id = 0}, igmpv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0},
flow = 0, blank = 0, ip_p = 0, type = 0 '\0', code = 0 '\0',
pad = 0}, igmp = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', type = 0 '\0', code = 0 '\0', pad = 0, ip_id = 0},
espv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, flow = 0,
blank = 0, ip_p = 0, spi = 0}, esp = {ip_src = 0, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 0,
pro = 0, hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0,
arp_tpa = 0, haddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, rarp = {hrd = 0, pro = 0,
---Type <return> to continue, or q <return> to quit---
hln = 0 '\0', pln = 0 '\0', op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}, dhaddr = {{
ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 0, hln = 0 '\0',
pln = 0 '\0', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, larp = {arp_spa = 0,
arp_tpa = 0, etheraddr = "\000\000\000\000\000", pad = 0}, lrarp = {
arp_tpa = 0, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, flow = 0, resv = 0, ip_p = 0, ip_id = 0},
frag = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', pad = {
0, 0}, ip_id = 0}}}, trans = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
---Type <return> to continue, or q <return> to quit---
len = 0 '\0'}, vl16 = {len = 0}}}, srcid = {ar_addr_un = {
value = 0, ipv4 = 0}}, seqnum = 0}, time = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, src = {start = {tv_sec = 0,
tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}}, dst = {start = {
tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}}},
encaps = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, src = 0, dst = 0}, attr = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, src = {ttl = 0 '\0',
tos = 0 '\0', ip_id = 0, options = 0}, dst = {ttl = 0 '\0',
tos = 0 '\0', ip_id = 0, options = 0}}, metric = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {pkts = 0,
bytes = 0, appbytes = 0}, dst = {pkts = 0, bytes = 0, appbytes = 0}},
net = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}},
net_union = {tcpinit = {status = 0, seqbase = 0, options = 0, win = 0,
flags = 0 '\0', winshift = 0 '\0'}, tcpstatus = {status = 0,
src = 0 '\0', dst = 0 '\0', pad = "\000"}, tcp = {status = 0,
state = 0, options = 0, synAckuSecs = 0, ackDatauSecs = 0, src = {
lasttime = {tv_sec = 0, tv_usec = 0}, status = 0, seqbase = 0,
seq = 0, ack = 0, winnum = 0, bytes = 0, retrans = 0,
---Type <return> to continue, or q <return> to quit---
ackbytes = 0, state = 0, win = 0, winbytes = 0, flags = 0 '\0',
winshift = 0 '\0'}, dst = {lasttime = {tv_sec = 0, tv_usec = 0},
status = 0, seqbase = 0, seq = 0, ack = 0, winnum = 0, bytes = 0,
retrans = 0, ackbytes = 0, state = 0, win = 0, winbytes = 0,
flags = 0 '\0', winshift = 0 '\0'}}, icmp = {icmp_type = 0 '\0',
icmp_code = 0 '\0', iseq = 0, osrcaddr = 0, odstaddr = 0,
isrcaddr = 0, idstaddr = 0, igwaddr = 0}, icmpv6 = {
icmp_type = 0 '\0', icmp_code = 0 '\0', cksum = 0}, rtp = {
state = 0, src = {rh_cc = 0 '\0', rh_x = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_mark = 0 '\0', rh_seq = 0,
rh_time = 0, rh_ssrc = 0}, dst = {rh_cc = 0 '\0', rh_x = 0 '\0',
rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0', rh_mark = 0 '\0',
rh_seq = 0, rh_time = 0, rh_ssrc = 0}, sdrop = 0, ddrop = 0,
ssdev = 0, dsdev = 0}, rtcp = {src = {rh_rc = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_len = 0, rh_ssrc = 0}, dst = {
rh_rc = 0 '\0', rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0',
rh_len = 0, rh_ssrc = 0}, sdrop = 0, ddrop = 0}, igmp = {
igmp_type = 0 '\0', igmp_code = 0 '\0', igmp_group = 0, jdelay = {
tv_sec = 0, tv_usec = 0}, ldelay = {tv_sec = 0, tv_usec = 0}},
dhcp = {respaddr = 0}, esp = {status = 0, spi = 0, lastseq = 0,
lostseq = 0}, arp = {respaddr = "\000\000\000\000\000", pad = 0},
ah = {src_spi = 0, dst_spi = 0, src_replay = 0, dst_replay = 0},
frag = {fragnum = 0, frag_id = 0, totlen = 0, currlen = 0,
maxfraglen = 0, pad = 0}}}, mac = {hdr = {type = 0 '\0',
---Type <return> to continue, or q <return> to quit---
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, mac_union = {ether = {ehdr = {
ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}}}, vlan = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, sid = 0, did = 0}, mpls = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, slabel = 0,
dlabel = 0}, icmp = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {
fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, icmp_type = 0 '\0', icmp_code = 0 '\0', iseq = 0,
osrcaddr = 0, odstaddr = 0, isrcaddr = 0, idstaddr = 0, igwaddr = 0},
agr = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, count = 0,
laststartime = {tv_sec = 0, tv_usec = 0}, lasttime = {tv_sec = 0,
tv_usec = 0}, act = {n = 0, minval = 0, meanval = 0, stdev = 0,
maxval = 0}, idle = {n = 0, minval = 0, meanval = 0, stdev = 0,
maxval = 0}}, jitter = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, act = {src = {n = 0, minval = 0, meanval = 0,
stdev = 0, maxval = 0}, dst = {n = 0, minval = 0, meanval = 0,
stdev = 0, maxval = 0}}, idle = {src = {n = 0, minval = 0,
meanval = 0, stdev = 0, maxval = 0}, dst = {n = 0, minval = 0,
---Type <return> to continue, or q <return> to quit---
meanval = 0, stdev = 0, maxval = 0}}}, psize = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
psizemin = 0, psizemax = 0}, dst = {psizemin = 0, psizemax = 0}},
data = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, size = 0,
count = 0, array = "\000\000\000\000\000\000\000"}}, ArgusInitCon = {
hdr = {type = 128 '\200', cause = 16 '\020', len = 8192}, ar_un = {mar = {
status = 0, argusid = 3408753125, localnet = 0, netmask = 0,
nextMrSequenceNum = 0, startime = {tv_sec = 0, tv_usec = 0}, now = {
tv_sec = -2095717306, tv_usec = 1496189440},
major_version = 3 '\003', minor_version = 0 '\0',
interfaceType = 0 '\0', interfaceStatus = 0 '\0',
reportInterval = 1280, argusMrInterval = 15360, pktsRcvd = 0,
bytesRcvd = 0, drift = 0, records = 0, flows = 0, dropped = 0,
queue = 0, output = 0, clients = 0, bufs = 0, bytes = 0, suserlen = 0,
duserlen = 0, pad = {0, 0, 0}, thisid = 0, record_len = 4294967295},
far = {flow = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, flow_un = {ipv6 = {ip_src = {3408753125, 0, 0, 0},
ip_dst = {0, 0, 2199249990, 1496189440}, flow = 3, blank = 0,
ip_p = 0, sport = 1280, dport = 15360}, ip = {
ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
sport = 0, dport = 0, pad = 0}, mac = {ehdr = {
---Type <return> to continue, or q <return> to quit---
ether_dhost = "åq-Ë\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {3408753125,
0, 0, 0}, ip_dst = {0, 0, 2199249990, 1496189440}, flow = 3,
blank = 0, ip_p = 0, type = 0 '\0', code = 5 '\005',
id = 15360}, icmp = {ip_src = 3408753125, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0', code = 0 '\0',
id = 0, ip_id = 0}, igmpv6 = {ip_src = {3408753125, 0, 0, 0},
ip_dst = {0, 0, 2199249990, 1496189440}, flow = 3, blank = 0,
ip_p = 0, type = 0 '\0', code = 5 '\005', pad = 15360}, igmp = {
ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
type = 0 '\0', code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {
ip_src = {3408753125, 0, 0, 0}, ip_dst = {0, 0, 2199249990,
1496189440}, flow = 3, blank = 0, ip_p = 0, spi = 1006634240},
esp = {ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 29157,
pro = 52013, hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0,
arp_tpa = 0, haddr = {{ethernet = "\000\000\000\000\000",
ib = "\000\000\000\000\000\000\000\000Fä\025\203\000\n.Y\003\000\000\000\000\005\000<\000\000\000\000\000\000\000",
ieee1394 = "\000\000\000\000\000\000\000\000Fä\025\203\000\n.Y", framerelay = "\000\000\000", tokenring = "\000\000\000\000\000",
arcnet = "",
fiberchannel = "\000\000\000\000\000\000\000\000Fä\025\203",
---Type <return> to continue, or q <return> to quit---
atm = "\000\000\000\000\000\000\000\000Fä\025\203\000\n.Y\003\000\000"}}}, rarp = {hrd = 29157, pro = 52013, hln = 0 '\0', pln = 0 '\0',
op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y\003\000\000\000\000\005\000<\000\000\000",
ieee1394 = '\0' <repeats 12 times>, "Fä\025\203",
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y"}},
dhaddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 29157,
hln = 45 '-', pln = 203 'Ë', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y\003\000\000\000\000\005\000<\000\000\000",
ieee1394 = '\0' <repeats 12 times>, "Fä\025\203",
framerelay = "\000\000\000",
---Type <return> to continue, or q <return> to quit---
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y"}}},
larp = {arp_spa = 3408753125, arp_tpa = 0,
etheraddr = "\000\000\000\000\000", pad = 0}, lrarp = {
arp_tpa = 3408753125, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {
3408753125, 0, 0, 0}, ip_dst = {0, 0, 2199249990, 1496189440},
flow = 3, resv = 0, ip_p = 0, ip_id = 1006634240}, frag = {
ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
pad = {0, 0}, ip_id = 0}}}}}},
ArgusSrcUserData = '\0' <repeats 65535 times>,
ArgusDstUserData = '\0' <repeats 65535 times>}
(gdb)
(gdb) quit
# exit
Script done on Sun Sep 9 08:58:55 2007
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
-------------- next part --------------
Script started on Sun Sep 9 08:57:00 2007
# gdb ra ra.core
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-openbsd4.1"...
Core was generated by `ra'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/lib/libm.so.2.3...done.
Loaded symbols for /usr/lib/libm.so.2.3
Reading symbols from /usr/lib/libreadline.so.3.0...done.
Loaded symbols for /usr/lib/libreadline.so.3.0
Reading symbols from /usr/lib/libtermcap.so.10.0...done.
Loaded symbols for /usr/lib/libtermcap.so.10.0
Reading symbols from /usr/lib/libc.so.40.3...done.
Loaded symbols for /usr/lib/libc.so.40.3
Reading symbols from /usr/libexec/ld.so...done.
Loaded symbols for /usr/libexec/ld.so
#0 0x0fff752d in kill () from /usr/lib/libc.so.40.3
(gdb) where
#0 0x0fff752d in kill () from /usr/lib/libc.so.40.3
#1 0x1002fc37 in abort () at /usr/src/lib/libc/stdlib/abort.c:65
#2 0x100171a9 in wrterror (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:495
#3 0x1001726b in wrtwarning (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:505
#4 0x1001836b in free_pages (ptr=0x3c00d428, index=245785, info=0x0)
at /usr/src/lib/libc/stdlib/malloc.c:1384
#5 0x10018e68 in ifree (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1835
#6 0x1001903d in free (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1903
#7 0x1c04161b in ArgusCloseParser (parser=0x88879000) at argus_parser.c:174
#8 0x1c00346c in main (argc=5, argv=0xcfbc22f8) at argus_main.c:359
(gdb) up
#1 0x1002fc37 in abort () at /usr/src/lib/libc/stdlib/abort.c:65
65 /usr/src/lib/libc/stdlib/abort.c: No such file or directory.
in /usr/src/lib/libc/stdlib/abort.c
(gdb) uo p
#2 0x100171a9 in wrterror (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:495
495 /usr/src/lib/libc/stdlib/malloc.c: No such file or directory.
in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#3 0x1001726b in wrtwarning (p=0x2ffc53e0 "free_pages: pointer to wrong page")
at /usr/src/lib/libc/stdlib/malloc.c:505
505 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#4 0x1001836b in free_pages (ptr=0x3c00d428, index=245785, info=0x0)
at /usr/src/lib/libc/stdlib/malloc.c:1384
1384 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#5 0x10018e68 in ifree (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1835
1835 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#6 0x1001903d in free (ptr=0x3c00d428)
at /usr/src/lib/libc/stdlib/malloc.c:1903
1903 in /usr/src/lib/libc/stdlib/malloc.c
(gdb) up
#7 0x1c04161b in ArgusCloseParser (parser=0x88879000) at argus_parser.c:174
174 free (parser->RaTimeFormat);
(gdb) print parser->RaTom imeForm,a a at
$1 = 0x3c00d428 "%T.%f"
(gdb) print *parser
$2 = {status = 0, RaParseCompleting = 0, RaParseDone = 2, RaDonePending = 0,
RaTasksToDo = 0, ArgusReliableConnection = 0,
ArgusProgramName = 0x8a3c9000 "ra", RaTimeFormat = 0x3c00d428 "%T.%f",
RaTimeZone = 0x0, ArgusProgramArgs = 0x7ca10060 "ra -r link.argus -D8 -n ",
ArgusProgramOptions = 0x7ca10080 "-r link.argus -D8 -n", ArgusRealTime = {
tv_sec = 1189353355, tv_usec = 342050}, ArgusGlobalTime = {
tv_sec = 1189352835, tv_usec = 662647}, RaClientTimeout = {tv_sec = 1,
tv_usec = 0}, RaClientUpdate = {tv_sec = 0, tv_usec = 0}, RaStartTime = {
tv_sec = 881884, tv_usec = 0}, RaEndTime = {tv_sec = 1189335043,
tv_usec = 520765}, RaStartFilter = {tm_sec = 0, tm_min = 0, tm_hour = 0,
tm_mday = 0, tm_mon = 0, tm_year = 0, tm_wday = 0, tm_yday = 0,
tm_isdst = 0, tm_gmtoff = 0, tm_zone = 0x0}, RaLastFilter = {tm_sec = 0,
tm_min = 0, tm_hour = 0, tm_mday = 0, tm_mon = 0, tm_year = 0,
tm_wday = 0, tm_yday = 0, tm_isdst = 0, tm_gmtoff = 0, tm_zone = 0x0},
RaTmStruct = 0x2ffed4e0, tcount = 0, remote = {{
input = 0x0} <repeats 128 times>}, ArgusSessionId = 0,
NonBlockingDNS = 0, ArgusPidFile = 0x0, ArgusPidPath = 0x0, ns = 0x0,
ArgusOutput = 0x0, ArgusOutputList = 0x7ca10040,
ArgusInputList = 0x7ca10020, ArgusNameList = 0x0,
ArgusRemoteHosts = 0x8a3c9010, ArgusActiveHosts = 0x8a3c9020,
ArgusHostsActive = 0, ArgusMaxListen = 0, ArgusLfd = 0, ArgusAdjustTime = 0,
ArgusConnectTime = 0, ArgusReverse = 0, ArgusPrintXml = 0,
RadiumArchive = 0x0, ArgusID = 0, ArgusIDType = 0, ArgusReportTime = {
tv_sec = 0, tv_usec = 0}, ArgusUpdateInterval = {tv_sec = 0, tv_usec = 0},
---Type <return> to continue, or q <return> to quit---
ArgusMarReportInterval = {tv_sec = 0, tv_usec = 0}, ArgusTotalRecords = 28,
ArgusTotalMarRecords = 2, ArgusTotalFarRecords = 26, ArgusTotalPkts = 47,
ArgusTotalSrcPkts = 0, ArgusTotalDstPkts = 0, ArgusTotalBytes = 4857,
ArgusTotalSrcBytes = 0, ArgusTotalDstBytes = 0, aflag = 0 '\0',
Aflag = 0 '\0', bflag = 0 '\0', Bflag = 0 '\0', cflag = 0 '\0',
Cflag = 0 '\0', dflag = 0 '\0', Dflag = 0 '\0', eflag = 0 '\0',
Eflag = 0 '\0', fflag = 0 '\0', Fflag = 0 '\0', gflag = 0 '\0',
Gflag = 0 '\0', Hflag = 0 '\0', idflag = 0 '\0', jflag = 0 '\0',
lflag = 0 '\0', Lflag = 0 '\0', mflag = 0 '\0', notNetflag = 0 '\0',
Oflag = 1 '\001', pflag = 6 '\006', Pflag = 0 '\0', qflag = 0 '\0',
Qflag = 0 '\0', Netflag = 0 '\0', nflag = 2 '\002', Normflag = 0 '\0',
Pctflag = 0 '\0', pidflag = 0 '\0', tflag = 0 '\0', uflag = 0 '\0',
Wflag = 0 '\0', vflag = 0 '\0', Vflag = 0 '\0', iflag = 0 '\0',
Iflag = 0 '\0', Tflag = 0 '\0', rflag = 1 '\001', Rflag = 0 '\0',
Sflag = 0 '\0', xflag = 0 '\0', Xflag = 0 '\0', XMLflag = 0 '\0',
zflag = 0 '\0', Zflag = 0 '\0', debugflag = 8, RaInitialized = 1,
RaFieldDelimiter = 0 '\0', RaFieldQuoted = 0 '\0', RaFieldWidth = 0 '\0',
RaWriteOut = 0 '\0', Pauseflag = 0, hfield = 15, prfield = 6, pfield = 7,
Uflag = 0, sNflag = -1, eNflag = -1, startime_t = 2147483647,
lasttime_t = 0, timeout = 0, estr = 0x0, Hstr = 0x0, Mflag = 0x0,
sflag = 0x0, RaLabelStr = '\0' <repeats 65535 times>, RaLabel = 0x0,
ArgusRandomSeed = 0, RaLabelCounter = 0, RaSOptionIndex = 0,
RaSOptionStrings = {0x0 <repeats 134 times>}, ArgusFilterFiledes = {0, 0},
ArgusControlFiledes = {0, 0}, RaCumulativeMerge = 0,
---Type <return> to continue, or q <return> to quit---
RaFlowMajorModified = 0, RaAllocHashTableHeaders = 0,
RaAllocArgusRecord = 0, RaThisActiveIndex = 0, RaThisFlowNum = 0,
RaThisModelNum = 0, RaParseError = 0, ArgusMinuteUpdate = 0,
ArgusHourlyUpdate = 0, RaHistoMetricSeries = 0, RaHistoMetricLog = 0,
RaHistoLogInterval = 0, RaHistoBinSize = 0, RaHistoStart = 0,
RaHistoStartLog = 0, RaHistoEnd = 0, RaHistoEndLog = 0,
RaHistoRecords = 0x0, ArgusPortNum = 0, RaHistoBins = 0, RaCloseInputFd = 1,
RaPollMode = 0, RaAgMode = 0, RaMonMode = 0, RaZeroMode = 0,
RaPrintMode = 0, RaCursesMode = 0, RaPrintIndex = 128, RaExplicitDate = 0,
RaWildCardDate = 0, RaFlowModelFile = 0x0, exceptfile = 0x0, projstr = 0x0,
dbustr = 0x0, dbpstr = 0x0, ustr = 0x0, pstr = 0x0, timearg = 0x0,
wfile = 0x0, ArgusFlowModelFile = 0x0, ArgusLocalFilter = 0x0,
ArgusRemoteFilter = 0x0, ArgusDisplayFilter = 0x0, ArgusBindAddr = 0x0,
ArgusFilterCode = {bf_len = 0, bf_insns = 0x0}, ArgusDisplayCode = {
bf_len = 0, bf_insns = 0x0}, RaFlowModel = 0x0, ArgusCIDRBuffer = {
type = 0 '\0', len = 0 '\0', masklen = 0 '\0', pad = 0 '\0', addr = {0, 0,
0, 0}, mask = {0, 0, 0, 0}, str = 0x0}, ArgusCIDRPtr = 0x888896fc,
ArgusModeList = 0x0, ArgusMaskList = 0x0, ArgusInputFileList = 0x0,
ArgusRemoteHostList = 0x0, ArgusCurrentFile = 0x0, ArgusWfileList = 0x0,
RaPrintAlgorithm = 0, RaDebugString = '\0' <repeats 4095 times>, argus = {
qhdr = {nxt = 0x0, prv = 0x0, queue = 0x0, lasttime = {tv_sec = 0,
tv_usec = 0}, logtime = {tv_sec = 0, tv_usec = 0}}, status = 0,
dsrindex = 0, trans = 0, timeout = 0, idle = 0, bins = 0x0, htblhdr = 0x0,
nsq = 0x0, input = 0x0, dsrs = {0x0 <repeats 18 times>}, hdr = {
---Type <return> to continue, or q <return> to quit---
type = 0 '\0', cause = 0 '\0', len = 0}, canon = {hdr = {type = 0 '\0',
cause = 0 '\0', len = 0}, flow = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {ipv6 = {ip_src = {
0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0,
ip_p = 0, sport = 0, dport = 0}, ip = {ip_src = 0, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0, pad = 0},
mac = {ehdr = {ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0,
type = 0 '\0', code = 0 '\0', id = 0}, icmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', id = 0, ip_id = 0}, igmpv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0,
type = 0 '\0', code = 0 '\0', pad = 0}, igmp = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0',
code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0,
spi = 0}, esp = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0, arp_tpa = 0,
haddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
---Type <return> to continue, or q <return> to quit---
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, rarp = {hrd = 0, pro = 0,
hln = 0 '\0', pln = 0 '\0', op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}, dhaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 0,
hln = 0 '\0', pln = 0 '\0', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
---Type <return> to continue, or q <return> to quit---
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, larp = {arp_spa = 0,
arp_tpa = 0, etheraddr = "\000\000\000\000\000", pad = 0},
lrarp = {arp_tpa = 0, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {0, 0, 0,
0}, ip_dst = {0, 0, 0, 0}, flow = 0, resv = 0, ip_p = 0,
ip_id = 0}, frag = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = {0, 0}, ip_id = 0}}}, trans = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, srcid = {
ar_addr_un = {value = 0, ipv4 = 0}}, seqnum = 0}, time = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
start = {tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}},
dst = {start = {tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0,
tv_usec = 0}}}, encaps = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, src = 0, dst = 0}, attr = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
ttl = 0 '\0', tos = 0 '\0', ip_id = 0, options = 0}, dst = {
ttl = 0 '\0', tos = 0 '\0', ip_id = 0, options = 0}}, metric = {
---Type <return> to continue, or q <return> to quit---
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
pkts = 0, bytes = 0, appbytes = 0}, dst = {pkts = 0, bytes = 0,
appbytes = 0}}, net = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, net_union = {tcpinit = {status = 0,
seqbase = 0, options = 0, win = 0, flags = 0 '\0',
winshift = 0 '\0'}, tcpstatus = {status = 0, src = 0 '\0',
dst = 0 '\0', pad = "\000"}, tcp = {status = 0, state = 0,
options = 0, synAckuSecs = 0, ackDatauSecs = 0, src = {lasttime = {
tv_sec = 0, tv_usec = 0}, status = 0, seqbase = 0, seq = 0,
ack = 0, winnum = 0, bytes = 0, retrans = 0, ackbytes = 0,
state = 0, win = 0, winbytes = 0, flags = 0 '\0',
winshift = 0 '\0'}, dst = {lasttime = {tv_sec = 0, tv_usec = 0},
status = 0, seqbase = 0, seq = 0, ack = 0, winnum = 0,
bytes = 0, retrans = 0, ackbytes = 0, state = 0, win = 0,
winbytes = 0, flags = 0 '\0', winshift = 0 '\0'}}, icmp = {
icmp_type = 0 '\0', icmp_code = 0 '\0', iseq = 0, osrcaddr = 0,
odstaddr = 0, isrcaddr = 0, idstaddr = 0, igwaddr = 0}, icmpv6 = {
icmp_type = 0 '\0', icmp_code = 0 '\0', cksum = 0}, rtp = {
state = 0, src = {rh_cc = 0 '\0', rh_x = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_mark = 0 '\0', rh_seq = 0,
rh_time = 0, rh_ssrc = 0}, dst = {rh_cc = 0 '\0', rh_x = 0 '\0',
rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0',
---Type <return> to continue, or q <return> to quit---
rh_mark = 0 '\0', rh_seq = 0, rh_time = 0, rh_ssrc = 0},
sdrop = 0, ddrop = 0, ssdev = 0, dsdev = 0}, rtcp = {src = {
rh_rc = 0 '\0', rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0',
rh_len = 0, rh_ssrc = 0}, dst = {rh_rc = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_len = 0, rh_ssrc = 0},
sdrop = 0, ddrop = 0}, igmp = {igmp_type = 0 '\0',
igmp_code = 0 '\0', igmp_group = 0, jdelay = {tv_sec = 0,
tv_usec = 0}, ldelay = {tv_sec = 0, tv_usec = 0}}, dhcp = {
respaddr = 0}, esp = {status = 0, spi = 0, lastseq = 0,
lostseq = 0}, arp = {respaddr = "\000\000\000\000\000", pad = 0},
ah = {src_spi = 0, dst_spi = 0, src_replay = 0, dst_replay = 0},
frag = {fragnum = 0, frag_id = 0, totlen = 0, currlen = 0,
maxfraglen = 0, pad = 0}}}, mac = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, mac_union = {ether = {ehdr = {
ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}}}, vlan = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, sid = 0, did = 0}, mpls = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}},
slabel = 0, dlabel = 0}, icmp = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
---Type <return> to continue, or q <return> to quit---
len = 0 '\0'}, vl16 = {len = 0}}}, icmp_type = 0 '\0',
icmp_code = 0 '\0', iseq = 0, osrcaddr = 0, odstaddr = 0,
isrcaddr = 0, idstaddr = 0, igwaddr = 0}, agr = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, count = 0, laststartime = {
tv_sec = 0, tv_usec = 0}, lasttime = {tv_sec = 0, tv_usec = 0},
act = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}, idle = {
n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}}, jitter = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, act = {
src = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0},
dst = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}},
idle = {src = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0},
dst = {n = 0, minval = 0, meanval = 0, stdev = 0, maxval = 0}}},
psize = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, src = {psizemin = 0, psizemax = 0}, dst = {
psizemin = 0, psizemax = 0}}, data = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, size = 0, count = 0,
array = "\000\000\000\000\000\000\000"}}, srate = 0, drate = 0,
sload = 0, dload = 0, dur = 0, avgdur = 0, sploss = 0, dploss = 0,
offset = 0}, canon = {hdr = {type = 0 '\0', cause = 0 '\0', len = 0},
flow = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
---Type <return> to continue, or q <return> to quit---
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, flow_un = {
ipv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, flow = 0,
blank = 0, ip_p = 0, sport = 0, dport = 0}, ip = {ip_src = 0,
ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', sport = 0, dport = 0,
pad = 0}, mac = {ehdr = {ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, flow = 0, blank = 0, ip_p = 0, type = 0 '\0',
code = 0 '\0', id = 0}, icmp = {ip_src = 0, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0', code = 0 '\0', id = 0,
ip_id = 0}, igmpv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0},
flow = 0, blank = 0, ip_p = 0, type = 0 '\0', code = 0 '\0',
pad = 0}, igmp = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', type = 0 '\0', code = 0 '\0', pad = 0, ip_id = 0},
espv6 = {ip_src = {0, 0, 0, 0}, ip_dst = {0, 0, 0, 0}, flow = 0,
blank = 0, ip_p = 0, spi = 0}, esp = {ip_src = 0, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 0,
pro = 0, hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0,
arp_tpa = 0, haddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, rarp = {hrd = 0, pro = 0,
---Type <return> to continue, or q <return> to quit---
hln = 0 '\0', pln = 0 '\0', op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}, dhaddr = {{
ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 0, hln = 0 '\0',
pln = 0 '\0', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000", ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>, framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, larp = {arp_spa = 0,
arp_tpa = 0, etheraddr = "\000\000\000\000\000", pad = 0}, lrarp = {
arp_tpa = 0, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {0, 0, 0, 0},
ip_dst = {0, 0, 0, 0}, flow = 0, resv = 0, ip_p = 0, ip_id = 0},
frag = {ip_src = 0, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0', pad = {
0, 0}, ip_id = 0}}}, trans = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
---Type <return> to continue, or q <return> to quit---
len = 0 '\0'}, vl16 = {len = 0}}}, srcid = {ar_addr_un = {
value = 0, ipv4 = 0}}, seqnum = 0}, time = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, src = {start = {tv_sec = 0,
tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}}, dst = {start = {
tv_sec = 0, tv_usec = 0}, end = {tv_sec = 0, tv_usec = 0}}},
encaps = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, src = 0, dst = 0}, attr = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, src = {ttl = 0 '\0',
tos = 0 '\0', ip_id = 0, options = 0}, dst = {ttl = 0 '\0',
tos = 0 '\0', ip_id = 0, options = 0}}, metric = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {pkts = 0,
bytes = 0, appbytes = 0}, dst = {pkts = 0, bytes = 0, appbytes = 0}},
net = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}},
net_union = {tcpinit = {status = 0, seqbase = 0, options = 0, win = 0,
flags = 0 '\0', winshift = 0 '\0'}, tcpstatus = {status = 0,
src = 0 '\0', dst = 0 '\0', pad = "\000"}, tcp = {status = 0,
state = 0, options = 0, synAckuSecs = 0, ackDatauSecs = 0, src = {
lasttime = {tv_sec = 0, tv_usec = 0}, status = 0, seqbase = 0,
seq = 0, ack = 0, winnum = 0, bytes = 0, retrans = 0,
---Type <return> to continue, or q <return> to quit---
ackbytes = 0, state = 0, win = 0, winbytes = 0, flags = 0 '\0',
winshift = 0 '\0'}, dst = {lasttime = {tv_sec = 0, tv_usec = 0},
status = 0, seqbase = 0, seq = 0, ack = 0, winnum = 0, bytes = 0,
retrans = 0, ackbytes = 0, state = 0, win = 0, winbytes = 0,
flags = 0 '\0', winshift = 0 '\0'}}, icmp = {icmp_type = 0 '\0',
icmp_code = 0 '\0', iseq = 0, osrcaddr = 0, odstaddr = 0,
isrcaddr = 0, idstaddr = 0, igwaddr = 0}, icmpv6 = {
icmp_type = 0 '\0', icmp_code = 0 '\0', cksum = 0}, rtp = {
state = 0, src = {rh_cc = 0 '\0', rh_x = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_mark = 0 '\0', rh_seq = 0,
rh_time = 0, rh_ssrc = 0}, dst = {rh_cc = 0 '\0', rh_x = 0 '\0',
rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0', rh_mark = 0 '\0',
rh_seq = 0, rh_time = 0, rh_ssrc = 0}, sdrop = 0, ddrop = 0,
ssdev = 0, dsdev = 0}, rtcp = {src = {rh_rc = 0 '\0', rh_p = 0 '\0',
rh_ver = 0 '\0', rh_pt = 0 '\0', rh_len = 0, rh_ssrc = 0}, dst = {
rh_rc = 0 '\0', rh_p = 0 '\0', rh_ver = 0 '\0', rh_pt = 0 '\0',
rh_len = 0, rh_ssrc = 0}, sdrop = 0, ddrop = 0}, igmp = {
igmp_type = 0 '\0', igmp_code = 0 '\0', igmp_group = 0, jdelay = {
tv_sec = 0, tv_usec = 0}, ldelay = {tv_sec = 0, tv_usec = 0}},
dhcp = {respaddr = 0}, esp = {status = 0, spi = 0, lastseq = 0,
lostseq = 0}, arp = {respaddr = "\000\000\000\000\000", pad = 0},
ah = {src_spi = 0, dst_spi = 0, src_replay = 0, dst_replay = 0},
frag = {fragnum = 0, frag_id = 0, totlen = 0, currlen = 0,
maxfraglen = 0, pad = 0}}}, mac = {hdr = {type = 0 '\0',
---Type <return> to continue, or q <return> to quit---
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, mac_union = {ether = {ehdr = {
ether_dhost = "\000\000\000\000\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}}}, vlan = {hdr = {type = 0 '\0',
subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0',
len = 0 '\0'}, vl16 = {len = 0}}}, sid = 0, did = 0}, mpls = {
hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, slabel = 0,
dlabel = 0}, icmp = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {
fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, icmp_type = 0 '\0', icmp_code = 0 '\0', iseq = 0,
osrcaddr = 0, odstaddr = 0, isrcaddr = 0, idstaddr = 0, igwaddr = 0},
agr = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, count = 0,
laststartime = {tv_sec = 0, tv_usec = 0}, lasttime = {tv_sec = 0,
tv_usec = 0}, act = {n = 0, minval = 0, meanval = 0, stdev = 0,
maxval = 0}, idle = {n = 0, minval = 0, meanval = 0, stdev = 0,
maxval = 0}}, jitter = {hdr = {type = 0 '\0', subtype = 0 '\0',
dsr_un = {fl = {data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'},
vl16 = {len = 0}}}, act = {src = {n = 0, minval = 0, meanval = 0,
stdev = 0, maxval = 0}, dst = {n = 0, minval = 0, meanval = 0,
stdev = 0, maxval = 0}}, idle = {src = {n = 0, minval = 0,
meanval = 0, stdev = 0, maxval = 0}, dst = {n = 0, minval = 0,
---Type <return> to continue, or q <return> to quit---
meanval = 0, stdev = 0, maxval = 0}}}, psize = {hdr = {
type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0}, vl8 = {
qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, src = {
psizemin = 0, psizemax = 0}, dst = {psizemin = 0, psizemax = 0}},
data = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {data = 0},
vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {len = 0}}}, size = 0,
count = 0, array = "\000\000\000\000\000\000\000"}}, ArgusInitCon = {
hdr = {type = 128 '\200', cause = 16 '\020', len = 8192}, ar_un = {mar = {
status = 0, argusid = 3408753125, localnet = 0, netmask = 0,
nextMrSequenceNum = 0, startime = {tv_sec = 0, tv_usec = 0}, now = {
tv_sec = -2095717306, tv_usec = 1496189440},
major_version = 3 '\003', minor_version = 0 '\0',
interfaceType = 0 '\0', interfaceStatus = 0 '\0',
reportInterval = 1280, argusMrInterval = 15360, pktsRcvd = 0,
bytesRcvd = 0, drift = 0, records = 0, flows = 0, dropped = 0,
queue = 0, output = 0, clients = 0, bufs = 0, bytes = 0, suserlen = 0,
duserlen = 0, pad = {0, 0, 0}, thisid = 0, record_len = 4294967295},
far = {flow = {hdr = {type = 0 '\0', subtype = 0 '\0', dsr_un = {fl = {
data = 0}, vl8 = {qual = 0 '\0', len = 0 '\0'}, vl16 = {
len = 0}}}, flow_un = {ipv6 = {ip_src = {3408753125, 0, 0, 0},
ip_dst = {0, 0, 2199249990, 1496189440}, flow = 3, blank = 0,
ip_p = 0, sport = 1280, dport = 15360}, ip = {
ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
sport = 0, dport = 0, pad = 0}, mac = {ehdr = {
---Type <return> to continue, or q <return> to quit---
ether_dhost = "åq-Ë\000",
ether_shost = "\000\000\000\000\000", ether_type = 0},
dsap = 0 '\0', ssap = 0 '\0'}, icmpv6 = {ip_src = {3408753125,
0, 0, 0}, ip_dst = {0, 0, 2199249990, 1496189440}, flow = 3,
blank = 0, ip_p = 0, type = 0 '\0', code = 5 '\005',
id = 15360}, icmp = {ip_src = 3408753125, ip_dst = 0,
ip_p = 0 '\0', tp_p = 0 '\0', type = 0 '\0', code = 0 '\0',
id = 0, ip_id = 0}, igmpv6 = {ip_src = {3408753125, 0, 0, 0},
ip_dst = {0, 0, 2199249990, 1496189440}, flow = 3, blank = 0,
ip_p = 0, type = 0 '\0', code = 5 '\005', pad = 15360}, igmp = {
ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
type = 0 '\0', code = 0 '\0', pad = 0, ip_id = 0}, espv6 = {
ip_src = {3408753125, 0, 0, 0}, ip_dst = {0, 0, 2199249990,
1496189440}, flow = 3, blank = 0, ip_p = 0, spi = 1006634240},
esp = {ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0',
tp_p = 0 '\0', pad = 0, spi = 0}, arp = {hrd = 29157,
pro = 52013, hln = 0 '\0', pln = 0 '\0', op = 0, arp_spa = 0,
arp_tpa = 0, haddr = {{ethernet = "\000\000\000\000\000",
ib = "\000\000\000\000\000\000\000\000Fä\025\203\000\n.Y\003\000\000\000\000\005\000<\000\000\000\000\000\000\000",
ieee1394 = "\000\000\000\000\000\000\000\000Fä\025\203\000\n.Y", framerelay = "\000\000\000", tokenring = "\000\000\000\000\000",
arcnet = "",
fiberchannel = "\000\000\000\000\000\000\000\000Fä\025\203",
---Type <return> to continue, or q <return> to quit---
atm = "\000\000\000\000\000\000\000\000Fä\025\203\000\n.Y\003\000\000"}}}, rarp = {hrd = 29157, pro = 52013, hln = 0 '\0', pln = 0 '\0',
op = 0, arp_tpa = 0, shaddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y\003\000\000\000\000\005\000<\000\000\000",
ieee1394 = '\0' <repeats 12 times>, "Fä\025\203",
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y"}},
dhaddr = {{ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 31 times>,
ieee1394 = '\0' <repeats 15 times>,
framerelay = "\000\000\000",
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 19 times>}}}, iarp = {pro = 29157,
hln = 45 '-', pln = 203 'Ë', arp_spa = 0, arp_tpa = 0, haddr = {{
ethernet = "\000\000\000\000\000",
ib = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y\003\000\000\000\000\005\000<\000\000\000",
ieee1394 = '\0' <repeats 12 times>, "Fä\025\203",
framerelay = "\000\000\000",
---Type <return> to continue, or q <return> to quit---
tokenring = "\000\000\000\000\000", arcnet = "",
fiberchannel = '\0' <repeats 11 times>,
atm = '\0' <repeats 12 times>, "Fä\025\203\000\n.Y"}}},
larp = {arp_spa = 3408753125, arp_tpa = 0,
etheraddr = "\000\000\000\000\000", pad = 0}, lrarp = {
arp_tpa = 3408753125, srceaddr = "\000\000\000\000\000",
tareaddr = "\000\000\000\000\000"}, fragv6 = {ip_src = {
3408753125, 0, 0, 0}, ip_dst = {0, 0, 2199249990, 1496189440},
flow = 3, resv = 0, ip_p = 0, ip_id = 1006634240}, frag = {
ip_src = 3408753125, ip_dst = 0, ip_p = 0 '\0', tp_p = 0 '\0',
pad = {0, 0}, ip_id = 0}}}}}},
ArgusSrcUserData = '\0' <repeats 65535 times>,
ArgusDstUserData = '\0' <repeats 65535 times>}
(gdb)
(gdb) quit
# exit
Script done on Sun Sep 9 08:58:55 2007
-------------- next part --------------
A non-text attachment was scrubbed...
Name: link.argus
Type: application/octet-stream
Size: 3104 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070909/ca475366/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: link.tcp
Type: application/octet-stream
Size: 5633 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070909/ca475366/attachment-0001.obj>
More information about the argus
mailing list