I just compile RCDCap on CentOS 7.2 and besides some minor changes everything went fine.
Then problem is now, whenever I launch RCDCap I got the following crash.
[root@alfrtesttunnels02 ~]# rcdcap -i ens32 --erspan --tap-persist --tap-device mon0 --expression "host 10.2.103.75"
listening on ens32 (EN10MB), capture size 1518 bytes
worker threads: 8 on 8 CPUs
terminate called after throwing an instance of 'RCDCap::Exception'
what(): /root/RCDCap-0.7.99-Source/src/sink.cc:307: Invalid length; the complete packet must be captured in order to output it to a TAP device.
Original length: 1694; the length of the received packet: 1518.
Aborted (core dumped)
And that happened right after issuing any linux command (ex. tcpdump, top, or even ssh to the box)
In the /var/log/messages I just get
Mar 14 14:37:49 alfrtesttunnels02 kernel: device ens32 entered promiscuous mode
Mar 14 14:37:49 alfrtesttunnels02 NetworkManager[804]: <info> (mon0): link connected
Mar 14 14:38:35 alfrtesttunnels02 kernel: device ens32 left promiscuous mode
Mar 14 14:38:35 alfrtesttunnels02 NetworkManager[804]: <info> (mon0): link disconnected
Mar 14 14:38:35 alfrtesttunnels02 abrt-server: Package 'rcdcap' isn't signed with proper key
Mar 14 14:38:35 alfrtesttunnels02 abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2016-03-14-14:38:35-3539' exited with 1
Mar 14 14:38:35 alfrtesttunnels02 abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2016-03-14-14:38:35-3539'
Hi,
I just compile RCDCap on CentOS 7.2 and besides some minor changes everything went fine.
Then problem is now, whenever I launch RCDCap I got the following crash.
[root@alfrtesttunnels02 ~]# rcdcap -i ens32 --erspan --tap-persist --tap-device mon0 --expression "host 10.2.103.75"
listening on ens32 (EN10MB), capture size 1518 bytes
worker threads: 8 on 8 CPUs
terminate called after throwing an instance of 'RCDCap::Exception'
what(): /root/RCDCap-0.7.99-Source/src/sink.cc:307: Invalid length; the complete packet must be captured in order to output it to a TAP device.
Original length: 1694; the length of the received packet: 1518.
Aborted (core dumped)
And that happened right after issuing any linux command (ex. tcpdump, top, or even ssh to the box)
In the /var/log/messages I just get
Mar 14 14:37:49 alfrtesttunnels02 kernel: device ens32 entered promiscuous mode
Mar 14 14:37:49 alfrtesttunnels02 NetworkManager[804]: <info> (mon0): link connected
Mar 14 14:38:35 alfrtesttunnels02 kernel: device ens32 left promiscuous mode
Mar 14 14:38:35 alfrtesttunnels02 NetworkManager[804]: <info> (mon0): link disconnected
Mar 14 14:38:35 alfrtesttunnels02 abrt-server: Package 'rcdcap' isn't signed with proper key
Mar 14 14:38:35 alfrtesttunnels02 abrt-server: 'post-create' on '/var/spool/abrt/ccpp-2016-03-14-14:38:35-3539' exited with 1
Mar 14 14:38:35 alfrtesttunnels02 abrt-server: Deleting problem directory '/var/spool/abrt/ccpp-2016-03-14-14:38:35-3539'
time: Mon 14 Mar 2016 02:43:54 PM WET
cmdline: rcdcap -i ens32 --erspan --tap-persist --tap-device mon0 --expression 'host 10.2.103.75'
uid: 0 (root)
abrt_version: 2.1.11
event_log:
executable: /usr/bin/rcdcap
global_pid: 3610
hostname: alfrtesttunnels02
kernel: 3.10.0-327.el7.x86_64
last_occurrence: 1457966634
pid: 3610
pkg_arch: x86_64
pkg_epoch: 0
pkg_name: rcdcap
pkg_release: 1
pkg_version: 0.7.99
pwd: /root
runlevel: N 3
username: root
I tried several MTU values on the ENS32 interface and the result is always the same.
Does any of you had experience this problem?
Thanks in advance!
Miguel