<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>After painfully compiling argus-3.0.8.4 and doing a capture with
that it would seems that it is ICMPv6 PTB records that causes the
segfault.<br>
<br>
ra -r /var/log/argus/icmpv6.ra <br>
StartTime Flgs Proto SrcAddr Sport
Dir DstAddr Dport TotPkts TotBytes State <br>
03/17.19:45:27.0* M 58 ::.128
-> :: 39 3070 ECO<br>
Segmentation fault (core dumped)<br>
<br>
ra3 -r /var/log/argus/icmpv6.ra<br>
StartTime Flgs Proto SrcAddr Sport
Dir DstAddr Dport TotPkts TotBytes State <br>
19:32:08.761843 man 0
0 0 0 0 0 STA<br>
19:45:27.004724 M 58 ::.128
-> ::.0 39 3070 ECO<br>
19:45:28.683723 e 58 ::.2
-> ::.0 1 1294 PTB<br>
<br>
Attached is some argus data containing ipv6 icmp captured with
argus-3.0.8.4 that causes the segfault<br>
<br>
/Patrick<br>
</p>
<div class="moz-cite-prefix">On 2025-03-17 19:25, Patrick Forsberg
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:e2105bc9-c1ae-4899-97ae-0b5679ca9c97@chalmers.se">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<p>I installed and compiled argus and clients today, but when I
run ra on captured data it segfaults pretty quickly.<br>
<br>
I've managed to narrow it down to being a problem with ipv6-icmp
(protocol 58) since I can run 'ra -r <capture file> - not
proto ipv6-icmp' without problems.<br>
<br>
Any suggestions on how I can dig further or even a suggestion on
what the problem could be?<br>
<br>
Installation was pretty straightforward<br>
<br>
git clone <a class="moz-txt-link-freetext"
href="https://github.com/openargus/argus"
moz-do-not-send="true">https://github.com/openargus/argus</a><br>
git clone <a class="moz-txt-link-freetext"
href="https://github.com/openargus/clients"
moz-do-not-send="true">https://github.com/openargus/clients</a><br>
<br>
cd argus; ./configure && make && make install<br>
cd client; ./configure && make && make install<br>
<br>
All done on Ubuntu 24.04<br>
<br>
Regards,<br>
<br>
/Patrick<br>
</p>
<div class="moz-signature">-- <br>
<font size="1" face="Arial"><b>Patrick Forsberg</b><br>
IT-säkerhetsspecialist | IT Security Specialist<br>
Chalmers Cyber- och informationssäkerhetsgrupp (CCIG)
| Chalmers IRT <a href="mailto:abuse@chalmers.se"
moz-do-not-send="true"><abuse@chalmers.se></a>
<p> Chalmers verksamhetsstöd | Chalmers Operations Support<br>
IT-avdelningen | IT Office<br>
+46(0)31 772 5353<br>
Besöksadress: Teknikparken / Sven Hultins gata 9C </p>
</font>
<p><font size="1" face="Arial"> <b>CHALMERS</b><br>
Chalmers tekniska högskola | Chalmers University of
Technology<br>
SE-412 96<br>
Göteborg | Gothenburg<br>
Sverige | Sweden<br>
<a href="https://www.chalmers.se" moz-do-not-send="true">www.chalmers.se</a></font></p>
</div>
</blockquote>
<div class="moz-signature">-- <br>
<font size="1" face="Arial"><b>Patrick Forsberg</b><br>
IT-säkerhetsspecialist | IT Security Specialist<br>
Chalmers Cyber- och informationssäkerhetsgrupp (CCIG) | Chalmers
IRT <a href="mailto:abuse@chalmers.se"><abuse@chalmers.se></a>
<p>
Chalmers verksamhetsstöd | Chalmers Operations Support<br>
IT-avdelningen | IT Office<br>
+46(0)31 772 5353<br>
Besöksadress: Teknikparken / Sven Hultins gata 9C
</p>
</font>
<p><font size="1" face="Arial">
<b>CHALMERS</b><br>
Chalmers tekniska högskola | Chalmers University of Technology<br>
SE-412 96<br>
Göteborg | Gothenburg<br>
Sverige | Sweden<br>
<a href="https://www.chalmers.se">www.chalmers.se</a></font></p>
</div>
</body>
</html>