Re: [Nfsen-discuss] PortTracker-v.e-1.5 SegFault
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Peter H. <ha...@sw...> - 2006-03-10 06:29:15
|
-----BEGIN PGP SIGNED MESSAGE-----
H
- --On March 9, 2006 16:34:23 -0600 daniel schrock <dsc...@gm...> wrote:
| Hello all,
|
| I'm having an issue with PortTracker that I'm hoping someone can give me
| a hand with.
|
| PortTracker is segfaulting.
Yes - it does, when using rrdtool-1.2.11. Either patch rrdtool-1.2.11 using
the patch supplied with PortTracker, or upgrade to rrdtool-1.2.12 or downgrade
to rrdtool 1.0.x. Make sure Perl uses the same rrd libraries as nftrack does.
When linking nft
|
| This is my first time using nfsen (great application, btw... thanks
| Peter!). I was running nfsen-1.2.3 with nfdump-1.5-beta-4 and thought
| maybe that had something to do with it, so I upgraded to nfsen-1.2.4 and
| nfdump-1.5 and recompiled PortTracker but am getting the same result.
Yes - because it's an rrd issue :)
nfdump-1.5 final is recommended anyway when using together with nfsen, due to a
profiling issue. So your upgrade was not a bad idea :)
And last but not least: This version of PortTracker is experimental and will
be discontinued. Its purpose was to gain some experiance and to see if it is
useful. PortTracker will be new implemented.
- Peter
btw. I have to mention, that I would wish more people would add such extensive
debugging information, as you did below, as this helps me to locate potential bugs.
However, in that case it wasn't required. :)
| Running the failing command manually gives me a core file. Here are the
| logs, some gdb output (i'm not well versed in gdb, so if you want something
| specific run, just send me the command), and version info.
|
| Vital Stats: FreeBSD 6.0-Release
| Nfsen/Nfdump Compiled from source downloaded from sourceforge (not ports
| collection)
| nfsen-1.2.4
| nfdump-1.5
| PortTracker-v.e-1.5
| rrdtool version 1.2.11
|
| nfsen.log:
| Mar 9 08:30:30 util2 nfsen[18448]: Run periodic at Thu Mar 9 08:30:00 2006
| Mar 9 08:30:30 util2 nfsen[18448]: Update profile live
| Mar 9 08:30:30 util2 nfsen[18448]: Signal launcher: live:200603090825
| Mar 9 08:30:30 util2 nfsen[18449]: Launcher Cycle: received: live,
| 200603090825
| Mar 9 08:30:30 util2 nfsen[18449]: Launcher Cycle: Time: 200603090825,
| Profile: live, Module: PortTracker,
| Mar 9 08:30:30 util2 nfsen[18449]: PortTracker run: Profile: live,
| Time: 200603090825
| Mar 9 08:30:30 util2 nfsen[18449]:
| /usr/local/netflow/nfdump/bin/nftrack -M
| /usr/local/netflow/nfsen/profiles/live/sw1_pkh:r0_eqx:r1_eqx -r
| nfcapd.200603090825 -d /usr/local/netflow/ports-db -A -t 200603090825 -s
| -p -w /usr/local/netflow/ports-db/portstat.txt
| Mar 9 08:30:30 util2 nfsen[18449]: nftrack died with signal 11, without
| coredump
| Mar 9 08:30:30 util2 nfsen[18449]:
| /usr/local/netflow/nfdump/bin/nftrack -d /usr/local/netflow/ports-db -S
| -p -w /usr/local/netflow/ports-db/portstat24.txt
| Mar 9 08:30:30 util2 nfsen[18449]: nftrack exited with value 0
| Mar 9 08:30:30 util2 nfsen[18449]: PortTracker run: Done.
| Mar 9 08:30:30 util2 nfsen[18448]: End periodic at Thu Mar 9 08:30:00 2006
| Mar 9 08:30:30 util2 nfsen[18448]: Run expire at Thu Mar 9 08:30:00 2006
| Mar 9 08:30:30 util2 nfsen[18448]: End expire at Thu Mar 9 08:30:00 2006
|
| gdb output from core file:
| -(root@util2)-(/dev/ttyp0)-(08:32 AM Thu Mar 09)-
| (/usr/local/netflow) # gdb nfdump/bin/nftrack nftrack.core
| GNU gdb 6.1.1 [FreeBSD]
| Copyright 2004 Free Software Foundation, Inc.
| GDB is free software, covered by the GNU General Public License, and you are
| welcome to change it and/or distribute copies of it under certain
| conditions.
| Type "show copying" to see the conditions.
| There is absolutely no warranty for GDB. Type "show warranty" for details.
| This GDB was configured as "i386-marcel-freebsd"...
| Core was generated by `nftrack'.
| Program terminated with signal 11, Segmentation fault.
| Reading symbols from /usr/local/lib/librrd.so.2...done.
| Loaded symbols for /usr/local/lib/librrd.so.2
| Reading symbols from /lib/libc.so.6...done.
| Loaded symbols for /lib/libc.so.6
| Reading symbols from /usr/local/lib/libfreetype.so.9...done.
| Loaded symbols for /usr/local/lib/libfreetype.so.9
| Reading symbols from /usr/local/lib/libpng.so.5...done.
| Loaded symbols for /usr/local/lib/libpng.so.5
| Reading symbols from /lib/libz.so.3...done.
| Loaded symbols for /lib/libz.so.3
| Reading symbols from /usr/local/lib/libart_lgpl_2.so.5...done.
| Loaded symbols for /usr/local/lib/libart_lgpl_2.so.5
| Reading symbols from /lib/libm.so.4...done.
| Loaded symbols for /lib/libm.so.4
| Reading symbols from /libexec/ld-elf.so.1...done.
| Loaded symbols for /libexec/ld-elf.so.1
| # 0 0x0804a8b1 in RRD_GetDataRow (
| path=0x805bac0 "/usr/local/netflow/ports-db", when=1141767300)
| at nftrack_rrd.c:453
| 453 if ( ds_cnt != 1024 ) {
| (gdb) print ds_cnt
| $1 = 1024
| (gdb) backtrace
| # 0 0x0804a8b1 in RRD_GetDataRow (
| path=0x805bac0 "/usr/local/netflow/ports-db", when=1141767300)
| at nftrack_rrd.c:453
| # 1 0x0804b0c1 in UpdateStat (row=0x816e000, when=1141913100)
| at nftrack_stat.c:222
| # 2 0x08049609 in main (argc=135716864, argv=0x1) at nftrack.c:422
| (gdb)
|
| Please let me know if I can give you any more information. I am loving
| nfsen and would love to get PortTracker working as well.
|
| Thanks.
|
| --
| .daniel.schrock
|
|
| -------------------------------------------------------
| This SF.Net email is sponsored by xPML, a groundbreaking scripting language
| that extends applications into web and mobile media. Attend the live webcast
| and join the prime developer group breaking into this new coding territory!
| http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642
| _______________________________________________
| Nfsen-discuss mailing list
| Nfs...@li...
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
|
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
iQCVAwUBRBEcsP5AbZRALNr/AQGgCAP+NOr3aXVvemlrJ6VWlfHcl3UJG5OwXRbM
heIbWlzIKNK3SaNSvuYP8Gi+8n21/6nNLoIVFsfKZPilEc3Ejyb+BXyPTYtK2Y57
4+lnO8WXH+LeCZS/DMyPh93jx8KCNsA8LJ42N9S/EgUGd/XW+di+H8Z92DRD2LHY
nTGvJIJ35Y0=
=ZpJk
-----END PGP SIGNATURE-----
|