Menu
▾
▴
sshguard-users
|
From: Chris St D. <ch...@ct...> - 2015-09-25 19:21:49
|
I upgraded from 1.6.0 to 1.6.1 and it started crashing on load.
Bus error (core dumped)
Here is a backtrace, tho it doesn't look that useful. I still have the
core file so I can generate better ones with instructions.
#0 0x0000000800c24b33 in getenv () from /lib/libc.so.7
[New Thread 801406800 (LWP 101216/sshguard)]
[New Thread 801406400 (LWP 101479/sshguard)]
(gdb) bt
#0 0x0000000800c24b33 in getenv () from /lib/libc.so.7
#1 0x0000000800c04479 in tzset () from /lib/libc.so.7
#2 0x0000000800c04c56 in ctime_r () from /lib/libc.so.7
#3 0x0000000800c01ca1 in vsyslog () from /lib/libc.so.7
#4 0x0000000800c01b7b in syslog () from /lib/libc.so.7
#5 0x0000000000404125 in ?? ()
#6 0x00000000004028a6 in ?? ()
#7 0x000000000040236f in ?? ()
#8 0x00000008006c4000 in ?? ()
#9 0x0000000000000000 in ?? ()
A little experimenting showed that it was being caused by something in
the blacklist file. Renaming the file and letting it create a new one
fixed it.
Here is a copy of the file. Hopefully a dev can reproduce the crash with it.
# SSHGuard blacklist file ( http://www.sshguard.net/ ).
# Format of entries: BLACKLIST_TIMESTAMP|SERVICE|ADDRESS_TYPE|ADDRESS
1437287630|100|4|5.231.228.91
1437315019|100|4|222.186.52.213
1437516671|100|4|58.52.134.5
1437651459|100|4|222.186.42.218
1438097148|100|4|104.149.197.97
1438128829|100|4|222.186.56.112
1438296390|100|4|5.255.144.81
1438391422|100|4|125.39.170.138
1438435051|100|4|169.54.233.117
1438538121|100|4|111.73.46.231
1438547318|100|4|111.20.145.210
1438584253|100|4|222.186.34.86
1438786729|100|4|203.124.106.16
1438924282|100|4|218.2.22.36
1439138420|100|4|117.21.191.209
1439162584|100|4|222.186.21.46
1439215230|100|4|222.186.30.21
1439247605|100|4|114.241.155.156
1439247705|100|4|114.241.130.204
1439247740|100|4|114.241.137.4
1439247948|100|4|123.123.213.36
1439247981|100|4|114.241.157.237
1439248058|100|4|114.241.135.160
1439248113|100|4|123.123.215.187
1439248458|100|4|123.123.214.60
1439468360|100|4|61.186.245.211
1439468360|100|4|113.204.53.134
1439540283|100|4|169.54.233.126
1439811166|100|4|211.37.45.100
1439948790|100|4|119.254.16.13
1440049115|100|4|103.254.110.52
1440349237|100|4|219.235.4.119
1440558369|100|4|61.160.212.144
1440810164|100|4|169.54.233.120
1441038197|100|4|61.183.35.86
1441257970|100|4|222.186.15.92
1441346100|100|4|221.12.5.107
1441599273|100|4|221.231.6.245
1441780504|100|4|222.186.190.55
1442222411|100|4|222.186.56.107
1442434123|100|4|222.186.56.114
1442490491|100|4|169.54.233.121
1443104332|100|4|222.186.30.202
Other info
root@Rin:/ # sshguard -v
sshguard 1.6.1
root@Rin:/ # uname -a
FreeBSD Rin.ctgameinfo.com 10.1-RELEASE-p15 FreeBSD 10.1-RELEASE-p15
#0: Tue Jul 21 18:00:00 UTC 2015
ro...@am...:/usr/obj/usr/src/sys/GENERIC amd64
|
|
From: Kevin Z. <kev...@gm...> - 2015-10-10 16:53:54
|
On 09/25/2015 12:02, Chris St Denis wrote: > I upgraded from 1.6.0 to 1.6.1 and it started crashing on load. Are you using 'ipfw' with the blacklist? Best, Kevin Zheng -- Kevin Zheng kev...@gm... | ke...@kd... | PGP: 0xC22E1090 |
|
From: Greg P. <gr...@n0...> - 2015-10-10 17:41:01
|
Chris, The blacklist is too big. Delete it all, or leave 3-4 entries. The problem is that it tries to add all of them in one big long ipfw rule and its too long. There was a patch in 1.6.0 in the FreeBSD port to deal with that. There's a far better fix coming in sshguard that uses an ipfw table instead of individual rules. And that fix will handle the blacklist file. Kevin, Do you have an idea when the version with the new ipfw method will be released? If its going to a bit yet, I can look into getting that previous patch into the FreeBSD port again. Greg > On Sep 25, 2015, at 14:02, Chris St Denis <ch...@ct...> wrote: > > I upgraded from 1.6.0 to 1.6.1 and it started crashing on load. > Bus error (core dumped) > Here is a backtrace, tho it doesn't look that useful. I still have the core file so I can generate better ones with instructions. > #0 0x0000000800c24b33 in getenv () from /lib/libc.so.7 > [New Thread 801406800 (LWP 101216/sshguard)] > [New Thread 801406400 (LWP 101479/sshguard)] > (gdb) bt > #0 0x0000000800c24b33 in getenv () from /lib/libc.so.7 > #1 0x0000000800c04479 in tzset () from /lib/libc.so.7 > #2 0x0000000800c04c56 in ctime_r () from /lib/libc.so.7 > #3 0x0000000800c01ca1 in vsyslog () from /lib/libc.so.7 > #4 0x0000000800c01b7b in syslog () from /lib/libc.so.7 > #5 0x0000000000404125 in ?? () > #6 0x00000000004028a6 in ?? () > #7 0x000000000040236f in ?? () > #8 0x00000008006c4000 in ?? () > #9 0x0000000000000000 in ?? () > A little experimenting showed that it was being caused by something in the blacklist file. Renaming the file and letting it create a new one fixed it. > > Here is a copy of the file. Hopefully a dev can reproduce the crash with it. > # SSHGuard blacklist file ( http://www.sshguard.net/ ). > # Format of entries: BLACKLIST_TIMESTAMP|SERVICE|ADDRESS_TYPE|ADDRESS > 1437287630|100|4|5.231.228.91 > 1437315019|100|4|222.186.52.213 > 1437516671|100|4|58.52.134.5 > 1437651459|100|4|222.186.42.218 > 1438097148|100|4|104.149.197.97 > 1438128829|100|4|222.186.56.112 > 1438296390|100|4|5.255.144.81 > 1438391422|100|4|125.39.170.138 > 1438435051|100|4|169.54.233.117 > 1438538121|100|4|111.73.46.231 > 1438547318|100|4|111.20.145.210 > 1438584253|100|4|222.186.34.86 > 1438786729|100|4|203.124.106.16 > 1438924282|100|4|218.2.22.36 > 1439138420|100|4|117.21.191.209 > 1439162584|100|4|222.186.21.46 > 1439215230|100|4|222.186.30.21 > 1439247605|100|4|114.241.155.156 > 1439247705|100|4|114.241.130.204 > 1439247740|100|4|114.241.137.4 > 1439247948|100|4|123.123.213.36 > 1439247981|100|4|114.241.157.237 > 1439248058|100|4|114.241.135.160 > 1439248113|100|4|123.123.215.187 > 1439248458|100|4|123.123.214.60 > 1439468360|100|4|61.186.245.211 > 1439468360|100|4|113.204.53.134 > 1439540283|100|4|169.54.233.126 > 1439811166|100|4|211.37.45.100 > 1439948790|100|4|119.254.16.13 > 1440049115|100|4|103.254.110.52 > 1440349237|100|4|219.235.4.119 > 1440558369|100|4|61.160.212.144 > 1440810164|100|4|169.54.233.120 > 1441038197|100|4|61.183.35.86 > 1441257970|100|4|222.186.15.92 > 1441346100|100|4|221.12.5.107 > 1441599273|100|4|221.231.6.245 > 1441780504|100|4|222.186.190.55 > 1442222411|100|4|222.186.56.107 > 1442434123|100|4|222.186.56.114 > 1442490491|100|4|169.54.233.121 > 1443104332|100|4|222.186.30.202 > Other info > root@Rin:/ # sshguard -v > sshguard 1.6.1 > > root@Rin:/ # uname -a > FreeBSD Rin.ctgameinfo.com 10.1-RELEASE-p15 FreeBSD 10.1-RELEASE-p15 #0: Tue Jul 21 18:00:00 UTC 2015 ro...@am...:/usr/obj/usr/src/sys/GENERIC amd64 > ------------------------------------------------------------------------------ > _______________________________________________ > Sshguard-users mailing list > Ssh...@li... > https://lists.sourceforge.net/lists/listinfo/sshguard-users |
|
From: Kevin Z. <kev...@gm...> - 2015-10-10 17:44:08
|
On 10/10/2015 10:25, Greg Putrich wrote: > Do you have an idea when the version with the new ipfw method will be > released? If its going to a bit yet, I can look into getting that > previous patch into the FreeBSD port again. Yeah, sorry for dragging my feet. I'll try to get 1.6.2 out by the end of this weekend. The only change will probably be the fix for ipfw. Thanks, Kevin Zheng -- Kevin Zheng kev...@gm... | ke...@kd... | PGP: 0xC22E1090 |
|
From: <li...@la...> - 2015-10-10 20:37:17
|
<html><head></head><body dir="auto" lang="en-US" style="background-color: rgb(255, 255, 255); line-height: initial;"> <div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif, sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">I've been running the development version with a table nearly 600 IP addresses long. It works great. No crashes.</div><div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif, sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);"><br></div><div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif, sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">There is no indication of when IP addresses are freed (removed from table). That might be a future feature. </div> <div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif, sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);"><br style="display:initial"></div> <div style="font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif, sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);"></div> <table width="100%" style="background-color:white;border-spacing:0px;"> <tbody><tr><td colspan="2" style="font-size: initial; text-align: initial; background-color: rgb(255, 255, 255);"> <div style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in; font-family: Tahoma, 'BB Alpha Sans', 'Slate Pro'; font-size: 10pt;"> <div><b>From: </b>Greg Putrich</div><div><b>Sent: </b>Saturday, October 10, 2015 10:41 AM</div><div><b>To: </b>ssh...@li...</div><div><b>Reply To: </b>ssh...@li...</div><div><b>Subject: </b>Re: [Sshguard-users] core dump after upgrade due to blacklist</div></div></td></tr></tbody></table><div style="border-style: solid none none; border-top-color: rgb(186, 188, 209); border-top-width: 1pt; font-size: initial; text-align: initial; background-color: rgb(255, 255, 255);"></div><br><div id="_originalContent" style=""><meta http-equiv="content-type" content="text/html; charset=utf-8"><div></div><div>Chris,</div><div><br></div><div>The blacklist is too big. Delete it all, or leave 3-4 entries.</div><div><br></div><div>The problem is that it tries to add all of them in one big long ipfw rule and its too long.</div><div><br></div><div>There was a patch in 1.6.0 in the FreeBSD port to deal with that. There's a far better fix coming in sshguard that uses an ipfw table instead of individual rules. And that fix will handle the blacklist file.</div><div><br></div><div><br></div><div>Kevin, </div><div>Do you have an idea when the version with the new ipfw method will be released? If its going to a bit yet, I can look into getting that previous patch into the FreeBSD port again.</div><div><br></div><div><br></div><div>Greg</div><div><br></div><div><br></div><div><br></div><div><br>On Sep 25, 2015, at 14:02, Chris St Denis <<a href="mailto:ch...@ct...">ch...@ct...</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
I upgraded from 1.6.0 to 1.6.1 and it started crashing on load. <br>
<blockquote>Bus error (core dumped)<br>
</blockquote>
Here is a backtrace, tho it doesn't look that useful. I still have
the core file so I can generate better ones with instructions.<br>
<blockquote>#0 0x0000000800c24b33 in getenv () from /lib/libc.so.7<br>
[New Thread 801406800 (LWP 101216/sshguard)]<br>
[New Thread 801406400 (LWP 101479/sshguard)]<br>
(gdb) bt<br>
#0 0x0000000800c24b33 in getenv () from /lib/libc.so.7<br>
#1 0x0000000800c04479 in tzset () from /lib/libc.so.7<br>
#2 0x0000000800c04c56 in ctime_r () from /lib/libc.so.7<br>
#3 0x0000000800c01ca1 in vsyslog () from /lib/libc.so.7<br>
#4 0x0000000800c01b7b in syslog () from /lib/libc.so.7<br>
#5 0x0000000000404125 in ?? ()<br>
#6 0x00000000004028a6 in ?? ()<br>
#7 0x000000000040236f in ?? ()<br>
#8 0x00000008006c4000 in ?? ()<br>
#9 0x0000000000000000 in ?? ()<br>
</blockquote>
A little experimenting showed that it was being caused by something
in the blacklist file. Renaming the file and letting it create a new
one fixed it. <br>
<br>
Here is a copy of the file. Hopefully a dev can reproduce the crash
with it.<br>
<blockquote># SSHGuard blacklist file ( <a class="moz-txt-link-freetext" href="http://www.sshguard.net/">http://www.sshguard.net/</a> ).<br>
# Format of entries:
BLACKLIST_TIMESTAMP|SERVICE|ADDRESS_TYPE|ADDRESS<br>
1437287630|100|4|5.231.228.91<br>
1437315019|100|4|222.186.52.213<br>
1437516671|100|4|58.52.134.5<br>
1437651459|100|4|222.186.42.218<br>
1438097148|100|4|104.149.197.97<br>
1438128829|100|4|222.186.56.112<br>
1438296390|100|4|5.255.144.81<br>
1438391422|100|4|125.39.170.138<br>
1438435051|100|4|169.54.233.117<br>
1438538121|100|4|111.73.46.231<br>
1438547318|100|4|111.20.145.210<br>
1438584253|100|4|222.186.34.86<br>
1438786729|100|4|203.124.106.16<br>
1438924282|100|4|218.2.22.36<br>
1439138420|100|4|117.21.191.209<br>
1439162584|100|4|222.186.21.46<br>
1439215230|100|4|222.186.30.21<br>
1439247605|100|4|114.241.155.156<br>
1439247705|100|4|114.241.130.204<br>
1439247740|100|4|114.241.137.4<br>
1439247948|100|4|123.123.213.36<br>
1439247981|100|4|114.241.157.237<br>
1439248058|100|4|114.241.135.160<br>
1439248113|100|4|123.123.215.187<br>
1439248458|100|4|123.123.214.60<br>
1439468360|100|4|61.186.245.211<br>
1439468360|100|4|113.204.53.134<br>
1439540283|100|4|169.54.233.126<br>
1439811166|100|4|211.37.45.100<br>
1439948790|100|4|119.254.16.13<br>
1440049115|100|4|103.254.110.52<br>
1440349237|100|4|219.235.4.119<br>
1440558369|100|4|61.160.212.144<br>
1440810164|100|4|169.54.233.120<br>
1441038197|100|4|61.183.35.86<br>
1441257970|100|4|222.186.15.92<br>
1441346100|100|4|221.12.5.107<br>
1441599273|100|4|221.231.6.245<br>
1441780504|100|4|222.186.190.55<br>
1442222411|100|4|222.186.56.107<br>
1442434123|100|4|222.186.56.114<br>
1442490491|100|4|169.54.233.121<br>
1443104332|100|4|222.186.30.202<br>
</blockquote>
Other info<br>
<blockquote>root@Rin:/ # sshguard -v<br>
sshguard 1.6.1<br>
<br>
root@Rin:/ # uname -a<br>
FreeBSD <a href="http://rin.ctgameinfo.com">Rin.ctgameinfo.com</a> 10.1-RELEASE-p15 FreeBSD
10.1-RELEASE-p15 #0: Tue Jul 21 18:00:00 UTC 2015
<a class="moz-txt-link-abbreviated" href="mailto:ro...@am...:/usr/obj/usr/src/sys/GENERIC">ro...@am...:/usr/obj/usr/src/sys/GENERIC</a>
amd64<br>
</blockquote>
</div></blockquote><blockquote type="cite"><div><span>------------------------------------------------------------------------------</span><br></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Sshguard-users mailing list</span><br><span><a href="mailto:Ssh...@li...">Ssh...@li...</a></span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/sshguard-users">https://lists.sourceforge.net/lists/listinfo/sshguard-users</a></span><br></div></blockquote><br><!--end of _originalContent --></div></body></html>
|
Thanks for helping keep SourceForge clean.
X