Segmentation fault error in racluster 3.0.7.7 and 3.0.7.9

[Sebastian Garcia]

Hi list, I wanted to report a segfault error on racluster.

For some unknown reasons, when processing a certain argus file with
racluster, I've got a segmentation fault. I'm providing the example
argus file.

If you run:
racluster -N 27 -n -r segfault1

Ther is no problems.

If you run:
racluster -N 28 -n -r segfault1

And you will get:
Segmentation fault


I'm not sure why we have this problem. I was playing with filters and
labels when I found it. First I saw that the labels had an strange
character at the end. For example:

2011/08/17 12:01:04.143218        5.142595             udp
        x.x.x.x     *         <->                   y.y.y.y     domain
     CON     0       0         40              4150    20     0.000415
       0.000395          7.583720

To-Normal-DNS-Server�:To-Normal-DNS-Server�:To-Normal-DNS-Server9:To-Normal-DNS-Server!:To-Normal-*

Here we should be getting only one label: "To-Normal-DNS-Server" and
not a lot of them.
I thought that may be the error was related to the labels, but then I
modify the argus file with ranonymizer and run racluster without
labels and it had the segfault error too.

I'm providing this for analysis. If you need more information just tell me.

Versions:
Argus: 3.0.6.1
Argus-clients with the problem (at least): 3.0.7.7 and 3.0.7.9

Thanks
sebastian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: segfault1
Type: application/octet-stream
Size: 3160788 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130819/c9fb09df/attachment.obj>