racluster 3.0.8.2 segfaults with -M dsrs option

Carter Bullard via Argus-info argus-info at lists.andrew.cmu.edu
Thu Jul 14 15:13:37 EDT 2016


Hey Markku P,
In looking at you data file, you’re only getting one side of all your traffic flow.  Could be a port mirroring problem ???
Carter


> On Jul 14, 2016, at 8:47 AM, Markku P via Argus-info <argus-info at lists.andrew.cmu.edu> wrote:
> 
> Hi,
> 
> My argus 3.0.8.1 has managed to produce few files that segfault even the latest racluster:
> 
> $ racluster -M dsrs=-agr -r crashing-20160703.dat -m proto  -w out.ra
> Segmentation fault
> 
> The issue seems to be on the "-M dsrs" option. The actual option value used does not seem to matter. Direct read with ra works normally. That same option works with most of my other files.
> 
> Trace:
> #0  0x0000000000457a81 in ArgusGenerateRecordStruct ()
> #1  0x0000000000432f4c in ArgusHandleRecord ()
> #2  0x0000000000459b7c in ArgusReadStreamSocket ()
> #3  0x0000000000459cb5 in ArgusReadFileStream ()
> #4  0x0000000000406482 in main ()
> 
> The system is an old CentOS 64bit linux, gcc 4.1.2.
> 
> I have uploaded that test file to qosient.com <http://qosient.com/> /incoming for your analysis.
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160714/230f006d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6285 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20160714/230f006d/attachment.bin>


More information about the argus mailing list