Unleash Networks Forum :: Topic: Segfaults and disk hogging (3/3)

Welcome, Guest

TOPIC: Segfaults and disk hogging

Segfaults and disk hogging 11 years 5 months ago #3727

vivek [unleash] OFFLINE Karma: 3	Can you try the following. 1) Generate the crash pcap trisul -nodemon /usr/local/etc/trisul/trisulConfig.xml -mode crashpcap 2) Analyze the core file. There wont be any symbols but we can look up the addresses. gdb /usr/local/bin/trisul corefile (gdb) bt ( a lot of addresses will follow just paste it here or email it to [info at unleashnetworks] ) we can make sense of it. Thanks,
	Vivek R Unleash Networks Support : www.unleashnetworks.com/forums The administrator has disabled public write access.

Segfaults and disk hogging 11 years 5 months ago #3729

lex
OFFLINE
Karma: 0

Trying to create crashpcap:

root@dpi:~# trisul -nodemon /usr/local/etc/trisul/trisulConfig.xml -mode crashpcap
terminate called after throwing an instance of 'std::domain_error'
  what():  Shared Memory Attach Error: See log for details
Aborted (core dumped)

gdb stacktrace - thread 1:

Reading symbols from /usr/local/bin/trisul...(no debugging symbols found)...done.
[New LWP 1811]
[New LWP 1480]
[New LWP 1806]
[New LWP 1807]
[New LWP 1810]
[New LWP 1809]
[New LWP 1808]
[New LWP 1812]
[New LWP 6221]
[New LWP 1813]
[New LWP 1823]

warning: Can't read pathname for load map: Input/output error.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/usr/local/bin/trisul -demon /usr/local/etc/trisul/trisulConfig.xml -mode fullb'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007ffe7f00c7e7 in CRYPTO_ctr128_encrypt () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0
(gdb) bt
#0  0x00007ffe7f00c7e7 in CRYPTO_ctr128_encrypt () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#1  0x00007ffe7eff670e in AES_ctr128_encrypt () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0
#2  0x0000000000625a8f in ?? ()
#3  0x0000000000547d9a in ?? ()
#4  0x00007ffe7ed64e9a in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0
#5  0x00007ffe7da4cccd in clone () from /lib/x86_64-linux-gnu/libc.so.6
#6  0x0000000000000000 in ?? ()

The administrator has disabled public write access.

Segfaults and disk hogging 11 years 5 months ago #3730

vivek [unleash] OFFLINE Karma: 3	Thanks, 1/ Looks like the machine was restarted post the crash ? The shared memory segment where the packet trail is stored seems to have disappeared. 2. Thanks for the backtrace. Will investigate. In the meantime, you can disable encryption for the PCAPs trisul.org/docs/ref/trisulconfig.html#ring
	Vivek R Unleash Networks Support : www.unleashnetworks.com/forums The administrator has disabled public write access.

Forum

Unleash Networks Forums

Trisul Network Metering and Forensics

Segfaults and disk hogging