Segmentation fault error in racluster 3.0.7.7 and 3.0.7.9

[Carter Bullard]

Hey Sebasitan,
Thanks for providing the file.  I'll debug this today !!!
Yes, there is a labeling bug that I'm working on,
if you've got that problem, I may have a fix also today !!!
I'll keep you posted,

Carter



On Aug 19, 2013, at 8:30 AM, Sebastian Garcia <sebastian.garcia at agents.fel.cvut.cz> wrote:

> Hi list, I wanted to report a segfault error on racluster.
> 
> For some unknown reasons, when processing a certain argus file with
> racluster, I've got a segmentation fault. I'm providing the example
> argus file.
> 
> If you run:
> racluster -N 27 -n -r segfault1
> 
> Ther is no problems.
> 
> If you run:
> racluster -N 28 -n -r segfault1
> 
> And you will get:
> Segmentation fault
> 
> 
> I'm not sure why we have this problem. I was playing with filters and
> labels when I found it. First I saw that the labels had an strange
> character at the end. For example:
> 
> 2011/08/17 12:01:04.143218        5.142595             udp
>        x.x.x.x     *         <->                   y.y.y.y     domain
>     CON     0       0         40              4150    20     0.000415
>       0.000395          7.583720
> 
> To-Normal-DNS-Server�:To-Normal-DNS-Server�:To-Normal-DNS-Server9:To-Normal-DNS-Server!:To-Normal-*
> 
> Here we should be getting only one label: "To-Normal-DNS-Server" and
> not a lot of them.
> I thought that may be the error was related to the labels, but then I
> modify the argus file with ranonymizer and run racluster without
> labels and it had the segfault error too.
> 
> I'm providing this for analysis. If you need more information just tell me.
> 
> Versions:
> Argus: 3.0.6.1
> Argus-clients with the problem (at least): 3.0.7.7 and 3.0.7.9
> 
> Thanks
> sebastian
> <segfault1>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7322 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130819/e37c35b6/attachment.bin>