[Bro-Dev] [JIRA] (BIT-1346) Val::CONVERTER Fatal Error - Sumstats Related
Jon Siwek (JIRA)
jira at bro-tracker.atlassian.net
Thu Mar 19 13:57:01 PDT 2015
[ https://bro-tracker.atlassian.net/browse/BIT-1346?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20030#comment-20030 ]
Jon Siwek commented on BIT-1346:
--------------------------------
Looks like the {{p}} field of a {{Notice::Info}} record may be getting corrupt somehow, but the location where that happens seems to be further down in the stack than you examined. Can you show a bit more?
Here's an example that I think reproduces this:
{code}
redef enum Notice::Type += {
Test,
};
global crash = "80/tcp";
event bro_init()
{
NOTICE([$note=Test,
$src=1.2.3.4,
$p=lookup_ID("crash"),
$msg="test",
$identifier=cat(1.2.3.4)]);
}
{code}
The {{lookup_ID}} function may not be the only way to "corrupt" a value with the wrong type, just the first one I thought of. I didn't see anything that ships w/ Bro that looked very suspicious, there is policy/misc/scan.bro which uses sumstats and sets the {{p}} field when raising a notice, but it should do that in a type safe way. Do you have any custom scripts which call out to the {{NOTICE}} function and set the {{p}} field? Or custom scripts using SumStats?
> Val::CONVERTER Fatal Error - Sumstats Related
> ---------------------------------------------
>
> Key: BIT-1346
> URL: https://bro-tracker.atlassian.net/browse/BIT-1346
> Project: Bro Issue Tracker
> Issue Type: Problem
> Components: Bro
> Affects Versions: git/master
> Reporter: Aaron Eppert
> Priority: Critical
> Labels: sumstats
> Fix For: 2.4
>
>
> Bro 2.3-451-debug
> Linux 2.6.32-504.8.1.el6.x86_64
> ==== reporter.log
> {"ts":1426643084.0629,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643086.504566,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643089.234903,"level":"Reporter::ERROR","message":"extra base64 groups after \u0027=\u0027 padding are ignored","location":""}
> {"ts":1426643089.234903,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643093.283505,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643095.710806,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643098.094734,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643108.020824,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643110.429037,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> {"ts":1426643122.957015,"level":"Reporter::ERROR","message":"incomplete base64 group, padding with 12 bits of 0","location":""}
> ==== stderr.log
> internal warning in /usr/local/bro/spool/installed-scripts-do-not-touch/site/ps-cif/./ps-cif.bro, line 4: Discarded extraneous Broxygen comment: Check to see if the tagged attribute exists, if so, log it, else
> internal warning in /usr/local/bro/spool/installed-scripts-do-not-touch/site/ps-cif/./ps-cif.bro, line 4: Discarded extraneous Broxygen comment: it is from the original Intel::LOG, drop it on the floor. This
> internal warning in /usr/local/bro/spool/installed-scripts-do-not-touch/site/ps-cif/./ps-cif.bro, line 4: Discarded extraneous Broxygen comment: prevents duplicate logging AND avoids a tertiary intel log to
> internal warning in /usr/local/bro/spool/installed-scripts-do-not-touch/site/ps-cif/./ps-cif.bro, line 4: Discarded extraneous Broxygen comment: parse.
> internal warning in /usr/local/bro/spool/installed-scripts-do-not-touch/site/ps-cif/./ps-cif.bro, line 4: Discarded extraneous Broxygen comment:
> unlimited
> unlimited
> unlimited
> unlimited
> fatal error in <no location>: Val::CONVERTER (string/port) (80/tcp)
> ==== stdout.log
> max memory size (kbytes, -m) unlimited
> data seg size (kbytes, -d) unlimited
> virtual memory (kbytes, -v) unlimited
> core file size (blocks, -c) unlimited
> ==== .cmdline
> -U .status -p broctl -p broctl-live -p local -p manager local.bro broctl base/frameworks/cluster local-manager.bro broctl/auto -B threading
> ==== .env_vars
> PATH=/usr/local/bro/bin:/usr/local/bro/share/broctl/scripts:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/tokumx/bin:/root/bin
> BROPATH=/usr/local/bro/spool/installed-scripts-do-not-touch/site::/usr/local/bro/spool/installed-scripts-do-not-touch/auto:/usr/local/bro/share/bro:/usr/local/bro/share/bro/policy:/usr/local/bro/share/bro/site
> CLUSTER_NODE=manager
> ==== .status
> TERMINATED [atexit]
> ==== No prof.log
> ==== No packet_filter.log
> ==== No loaded_scripts.log
> #0 0x0000003345c32625 in raise () from /lib64/libc.so.6
> #1 0x0000003345c33e05 in abort () from /lib64/libc.so.6
> #2 0x00000000007847d9 in Reporter::FatalError (this=0x1ba5490,
> fmt=0xaf4f56 "%s") at /root/ane/bro/src/Reporter.cc:92
> #3 0x000000000078bfb4 in BroObj::BadTag (this=0x4edeb20,
> msg=0xaeaeae "Val::CONVERTER", t1=0xb05a89 "string", t2=0xb05aa3 "port")
> at /root/ane/bro/src/Obj.cc:134
> #4 0x0000000000770c1c in Val::AsPortVal (this=0x4edeb20)
> at /root/ane/bro/src/Val.h:282
> #5 0x000000000075aecd in BifFunc::bro_get_port_transport_proto (
> frame=0x5862c60, BiF_ARGS=0x58f2d50) at bro.bif:3153
> #6 0x000000000074f3cd in BuiltinFunc::Call (this=0x217e940, args=0x58f2d50,
> parent=0x5862c60) at /root/ane/bro/src/Func.cc:564
> #7 0x0000000000740c4d in CallExpr::Eval (this=0x2299aa0, f=0x5862c60)
> at /root/ane/bro/src/Expr.cc:4920
> #8 0x00000000007370b7 in AssignExpr::Eval (this=0x2299b50, f=0x5862c60)
> at /root/ane/bro/src/Expr.cc:2669
> #9 0x00000000007e22bf in ExprStmt::Exec (this=0x2299cc0, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:369
> #10 0x00000000007e2b6f in IfStmt::DoExec (this=0x2299e20, f=0x5862c60,
> v=0x58b1870, flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:484
> #11 0x00000000007e22f3 in ExprStmt::Exec (this=0x2299e20, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:373
> #12 0x00000000007e8379 in StmtList::Exec (this=0x2293b70, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:1764
> #13 0x000000000074e6d5 in BroFunc::Call (this=0x22a1620, args=0x4fe5fc0,
> parent=0x55fc1e0) at /root/ane/bro/src/Func.cc:386
> #14 0x0000000000740c4d in CallExpr::Eval (this=0x22a2540, f=0x55fc1e0)
> at /root/ane/bro/src/Expr.cc:4920
> #15 0x00000000007e22bf in ExprStmt::Exec (this=0x22a2660, f=0x55fc1e0,
> flow=@0x7fff70b12424) at /root/ane/bro/src/Stmt.cc:369
> #16 0x00000000007e8379 in StmtList::Exec (this=0x22a2060, f=0x55fc1e0,
> flow=@0x7fff70b12424) at /root/ane/bro/src/Stmt.cc:1764
> #17 0x000000000074e6d5 in BroFunc::Call (this=0x22a2cc0, args=0x5469570,
> parent=0x520ebc0) at /root/ane/bro/src/Func.cc:386
> #18 0x0000000000740c4d in CallExpr::Eval (this=0x21ec0e0, f=0x520ebc0)
> at /root/ane/bro/src/Expr.cc:4920
> #19 0x00000000007e22bf in ExprStmt::Exec (this=0x21e38e0, f=0x520ebc0,
> flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:369
> #20 0x00000000007e2b6f in IfStmt::DoExec (this=0x21ed9a0, f=0x520ebc0,
> v=0x5382180, flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:484
> #21 0x00000000007e22f3 in ExprStmt::Exec (this=0x21ed9a0, f=0x520ebc0,
> flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:373
> #22 0x00000000007e8379 in StmtList::Exec (this=0x21eaa60, f=0x520ebc0,
> flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:1764
> #23 0x000000000074e6d5 in BroFunc::Call (this=0x21ed440, args=0x509ca00,
> parent=0x53e1d50) at /root/ane/bro/src/Func.cc:386
> #24 0x0000000000740c4d in CallExpr::Eval (this=0x34236a0, f=0x53e1d50)
> at /root/ane/bro/src/Expr.cc:4920
> #25 0x00000000007e22bf in ExprStmt::Exec (this=0x34237c0, f=0x53e1d50,
> flow=@0x7fff70b12a64) at /root/ane/bro/src/Stmt.cc:369
> #26 0x00000000007e8379 in StmtList::Exec (this=0x341d8e0, f=0x53e1d50,
> flow=@0x7fff70b12a64) at /root/ane/bro/src/Stmt.cc:1764
> #27 0x000000000074e6d5 in BroFunc::Call (this=0x3423a10, args=0x571e9e0,
> parent=0x4e16b50) at /root/ane/bro/src/Func.cc:386
> #28 0x0000000000740c4d in CallExpr::Eval (this=0x2a39e10, f=0x4e16b50)
> at /root/ane/bro/src/Expr.cc:4920
> #29 0x00000000007e22bf in ExprStmt::Exec (this=0x2a39f30, f=0x4e16b50,
> flow=@0x7fff70b12d84) at /root/ane/bro/src/Stmt.cc:369
> #30 0x00000000007e8379 in StmtList::Exec (this=0x2a36770, f=0x4e16b50,
> flow=@0x7fff70b12d84) at /root/ane/bro/src/Stmt.cc:1764
> #31 0x00000000007e8379 in StmtList::Exec (this=0x2a39f80, f=0x4e16b50,
> flow=@0x7fff70b12d84) at /root/ane/bro/src/Stmt.cc:1764
> #32 0x000000000074e6d5 in BroFunc::Call (this=0x2a3a050, args=0x4ff3bf0,
> parent=0x5682490) at /root/ane/bro/src/Func.cc:386
> #33 0x0000000000740c4d in CallExpr::Eval (this=0x2b62770, f=0x5682490)
> at /root/ane/bro/src/Expr.cc:4920
> #34 0x00000000007e22bf in ExprStmt::Exec (this=0x2bbb7b0, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:369
> #35 0x00000000007e8379 in StmtList::Exec (this=0x2b606d0, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:1764
> #36 0x00000000007e2b6f in IfStmt::DoExec (this=0x2b6f010, f=0x5682490,
> v=0x2a33c00, flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:484
> #37 0x00000000007e22f3 in ExprStmt::Exec (this=0x2b6f010, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:373
> #38 0x00000000007e8379 in StmtList::Exec (this=0x2b69cb0, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:1764
> #39 0x000000000074e6d5 in BroFunc::Call (this=0x2b08750, args=0x4cd7020,
> parent=0x51654a0) at /root/ane/bro/src/Func.cc:386
> #40 0x0000000000740c4d in CallExpr::Eval (this=0x2bcf960, f=0x51654a0)
> at /root/ane/bro/src/Expr.cc:4920
> #41 0x00000000007e22bf in ExprStmt::Exec (this=0x2bcfa80, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:369
> #42 0x00000000007e8379 in StmtList::Exec (this=0x2bcf200, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:1764
> #43 0x00000000007e2b6f in IfStmt::DoExec (this=0x2bd04f0, f=0x51654a0,
> v=0x4e12040, flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:484
> #44 0x00000000007e22f3 in ExprStmt::Exec (this=0x2bd04f0, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:373
> #45 0x00000000007e8379 in StmtList::Exec (this=0x2bca5f0, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:1764
> #46 0x000000000074e6d5 in BroFunc::Call (this=0x2ac0a30, args=0x55665e0,
> parent=0x0) at /root/ane/bro/src/Func.cc:386
> #47 0x000000000072588b in EventHandler::Call (this=0x2ac0870, vl=0x55665e0,
> no_remote=true) at /root/ane/bro/src/EventHandler.cc:80
> #48 0x00000000006d8cc2 in Event::Dispatch (this=0x4d194d0, no_remote=true)
> at /root/ane/bro/src/Event.h:50
> #49 0x00000000006d8e41 in EventMgr::Dispatch (this=0xebdb60, event=0x4d194d0,
> no_remote=true) at /root/ane/bro/src/Event.h:98
> #50 0x00000000007a15f2 in RemoteSerializer::Process (this=0x1be4b00)
> at /root/ane/bro/src/RemoteSerializer.cc:1439
> #51 0x00000000007889fc in net_run () at /root/ane/bro/src/Net.cc:320
> #52 0x00000000006d8157 in main (argc=16, argv=0x7fff70b13f98)
> at /root/ane/bro/src/main.cc:1200
> (gdb) frame 2
> #2 0x00000000007847d9 in Reporter::FatalError (this=0x1ba5490,
> fmt=0xaf4f56 "%s") at /root/ane/bro/src/Reporter.cc:92
> 92 /root/ane/bro/src/Reporter.cc: No such file or directory.
> in /root/ane/bro/src/Reporter.cc
> (gdb) print *this
> $11 = {errors = 1, via_events = true, in_error_handler = 0,
> info_to_stderr = true, warnings_to_stderr = false, errors_to_stderr = false,
> locations = std::list = {[0] = {first = 0xebf480, second = 0x0}}}
> (gdb) frame 3
> #3 0x000000000078bfb4 in BroObj::BadTag (this=0x4edeb20,
> msg=0xaeaeae "Val::CONVERTER", t1=0xb05a89 "string", t2=0xb05aa3 "port")
> at /root/ane/bro/src/Obj.cc:134
> 134 /root/ane/bro/src/Obj.cc: No such file or directory.
> in /root/ane/bro/src/Obj.cc
> (gdb) print *this
> $12 = {<SerialObj> = {_vptr.SerialObj = 0xb08370, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 34822}, in_ser_cache = false,
> location = 0x0, notify_plugins = false, ref_cnt = 5,
> static suppress_errors = 0}
> (gdb) print *this
> $13 = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xb08370,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 34822}, in_ser_cache = false, location = 0x0,
> notify_plugins = false, ref_cnt = 5, static suppress_errors = 0},
> static register_type = {<No data fields>}, tid = {id = 2684174,
> static counter = 2684785}, val = {int_val = 80599088, uint_val = 80599088,
> addr_val = 0x4cdd830, subnet_val = 0x4cdd830,
> double_val = 3.9821240466935464e-316, string_val = 0x4cdd830,
> func_val = 0x4cdd830, file_val = 0x4cdd830, re_val = 0x4cdd830,
> table_val = 0x4cdd830, val_list_val = 0x4cdd830, vector_val = 0x4cdd830},
> type = 0x1c30fb0, bound_id = 0x0}
> (gdb) print *this->val->string_val
> $14 = {static EXPANDED_STRING = 39, static BRO_STRING_LITERAL = 56,
> b = 0x4bbbd40 "80/tcp", n = 6, final_NUL = 1, use_free_to_delete = 0}
> (gdb) print *this->val->table_val
> $16 = {<Dictionary> = {_vptr.Dictionary = 0x4bbbd40, tbl = 0x100000006,
> num_buckets = 32, num_entries = 0, max_num_entries = 81,
> den_thresh = 5.7159126496652157e-317, thresh_entries = 0, tbl2 = 0x0,
> num_buckets2 = 875836160, num_entries2 = 1, max_num_entries2 = 1225167,
> den_thresh2 = 1426703154.9832709, thresh_entries2 = 29612816,
> tbl_next_ind = 0, order = 0x65746163696669, delete_func = 0x61,
> cookies = {<BaseList> = {entry = 0x2377ff0, chunk_size = 92305888,
> max_entries = 0,
> num_entries = 78707}, <No data fields>}}, <No data fields>}
> (gdb) frame 6
> #6 0x000000000074f3cd in BuiltinFunc::Call (this=0x217e940, args=0x58f2d50,
> parent=0x5862c60) at /root/ane/bro/src/Func.cc:564
> 564 /root/ane/bro/src/Func.cc: No such file or directory.
> in /root/ane/bro/src/Func.cc
> (gdb) print *this
> $21 = {<Func> = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xaf1550,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 0}, in_ser_cache = false, location = 0x217e9c0,
> notify_plugins = false, ref_cnt = 2, static suppress_errors = 0},
> bodies = std::vector of length 0, capacity 0, scope = 0x0,
> kind = Func::BUILTIN_FUNC, type = 0x1cc9fb0, name =
> "get_port_transport_proto", unique_id = 677,
> static unique_ids = {<std::_Vector_base<Func*, std::allocator<Func*> >> = {
> _M_impl = {<std::allocator<Func*>> = {<__gnu_cxx::new_allocator<Func*>> = {<No data fields>}, <No data fields>}, _M_start = 0x3125ac0,
> _M_finish = 0x31280e8,
> _M_end_of_storage = 0x3129ac0}}, <No data fields>}},
> static register_type = {<No data fields>}, tid = {id = 35977,
> static counter = 2684785},
> func = 0x75ae6e <BifFunc::bro_get_port_transport_proto(Frame*, val_list*)>,
> is_pure = 0}
> (gdb) print *this->location
> $22 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2173970 "/usr/local/bro/share/bro/base/bif/plugins/./Bro_X509.functions.bif.bro", first_line = 69, last_line = 69, first_column = 0,
> last_column = 0, delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 35976,
> static counter = 2684785}}
> (gdb) frame 7
> #7 0x0000000000740c4d in CallExpr::Eval (this=0x2299aa0, f=0x5862c60)
> at /root/ane/bro/src/Expr.cc:4920
> 4920 /root/ane/bro/src/Expr.cc: No such file or directory.
> in /root/ane/bro/src/Expr.cc
> (gdb) print *this
> $23 = {<Expr> = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xae6b10,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 0}, in_ser_cache = false, location = 0x2299b00,
> notify_plugins = false, ref_cnt = 1, static suppress_errors = 0},
> tag = EXPR_CALL, type = 0x1c34890, paren = 0},
> static register_type = {<No data fields>}, tid = {id = 44070,
> static counter = 2684785}, func = 0x2299690, args = 0x2299870}
> (gdb)
> (gdb) print *this->location
> $24 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2216180 "/usr/local/bro/share/bro/base/frameworks/notice/./main.bro", first_line = 597, last_line = 597, first_column = 0, last_column = 0,
> delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 44069,
> static counter = 2684785}}
> (gdb)
> (gdb) frame 8
> #8 0x00000000007370b7 in AssignExpr::Eval (this=0x2299b50, f=0x5862c60)
> at /root/ane/bro/src/Expr.cc:2669
> 2669 in /root/ane/bro/src/Expr.cc
> (gdb) print *this
> $25 = {<BinaryExpr> = {<Expr> = {<BroObj> = {<SerialObj> = {
> _vptr.SerialObj = 0xae7bd0, static NEVER = 0, static ALWAYS = 1,
> static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> in_ser_cache = false, location = 0x2299c70, notify_plugins = false,
> ref_cnt = 1, static suppress_errors = 0}, tag = EXPR_ASSIGN,
> type = 0x1c34890, paren = 0}, static register_type = {<No data fields>},
> tid = {id = 44080, static counter = 2684785}, op1 = 0x2299c10,
> op2 = 0x2299aa0}, static register_type = {<No data fields>}, tid = {
> id = 44081, static counter = 2684785}, is_init = 0, val = 0x0}
> (gdb) print *this->location
> $26 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2216180 "/usr/local/bro/share/bro/base/frameworks/notice/./main.bro", first_line = 597, last_line = 597, first_column = 0, last_column = 0,
> delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 44082,
> static counter = 2684785}}
> (gdb) frame 9
> #9 0x00000000007e22bf in ExprStmt::Exec (this=0x2299cc0, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:369
> 369 /root/ane/bro/src/Stmt.cc: No such file or directory.
> in /root/ane/bro/src/Stmt.cc
> (gdb) print *this
> $27 = {<Stmt> = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xb029f0,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 0}, in_ser_cache = false, location = 0x2299d10,
> notify_plugins = false, ref_cnt = 1, static suppress_errors = 0},
> tag = STMT_EXPR, breakpoint_count = 0, last_access = 1426699810.94208,
> access_count = 274}, static register_type = {<No data fields>}, tid = {
> id = 44085, static counter = 2684785}, e = 0x2299b50}
> (gdb) print *this->location
> $28 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2216180 "/usr/local/bro/share/bro/base/frameworks/notice/./main.bro", first_line = 597, last_line = 597, first_column = 0, last_column = 0,
> delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 44086,
> static counter = 2684785}}
> (gdb) frame 10
> #10 0x00000000007e2b6f in IfStmt::DoExec (this=0x2299e20, f=0x5862c60,
> v=0x58b1870, flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:484
> 484 in /root/ane/bro/src/Stmt.cc
> (gdb) print *this
> $29 = {<ExprStmt> = {<Stmt> = {<BroObj> = {<SerialObj> = {
> _vptr.SerialObj = 0xb02930, static NEVER = 0, static ALWAYS = 1,
> static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> in_ser_cache = false, location = 0x2299e90, notify_plugins = false,
> ref_cnt = 1, static suppress_errors = 0}, tag = STMT_IF,
> breakpoint_count = 0, last_access = 1426699810.94208,
> access_count = 274}, static register_type = {<No data fields>}, tid = {
> id = 44092, static counter = 2684785}, e = 0x2299360},
> static register_type = {<No data fields>}, tid = {id = 44094,
> static counter = 2684785}, s1 = 0x2299cc0, s2 = 0x2299d80}
> (gdb) print *this->location
> $30 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2216180 "/usr/local/bro/share/bro/base/frameworks/notice/./main.bro", first_line = 597, last_line = 596, first_column = 0, last_column = 0,
> delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 44095,
> static counter = 2684785}}
> (gdb) frame 11
> #11 0x00000000007e22f3 in ExprStmt::Exec (this=0x2299e20, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:373
> 373 in /root/ane/bro/src/Stmt.cc
> (gdb) print *this
> $31 = {<Stmt> = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xb02930,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 0}, in_ser_cache = false, location = 0x2299e90,
> notify_plugins = false, ref_cnt = 1, static suppress_errors = 0},
> tag = STMT_IF, breakpoint_count = 0, last_access = 1426699810.94208,
> access_count = 274}, static register_type = {<No data fields>}, tid = {
> id = 44092, static counter = 2684785}, e = 0x2299360}
> (gdb) print *this->location
> $32 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2216180 "/usr/local/bro/share/bro/base/frameworks/notice/./main.bro", first_line = 597, last_line = 596, first_column = 0, last_column = 0,
> delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 44095,
> static counter = 2684785}}
> (gdb)
> (gdb) frame 12
> #12 0x00000000007e8379 in StmtList::Exec (this=0x2293b70, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:1764
> 1764 in /root/ane/bro/src/Stmt.cc
> (gdb) print *this
> $33 = {<Stmt> = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xb02110,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 0}, in_ser_cache = false, location = 0x2293d60,
> notify_plugins = false, ref_cnt = 1, static suppress_errors = 0},
> tag = STMT_LIST, breakpoint_count = 0, last_access = 1426699810.94208,
> access_count = 274}, static register_type = {<No data fields>}, tid = {
> id = 43644, static counter = 2684785}, stmts = {<BaseList> = {
> entry = 0x229fd20, chunk_size = 20, max_entries = 20,
> num_entries = 15}, <No data fields>}}
> (gdb) print *this->location
> $34 = {<SerialObj> = {_vptr.SerialObj = 0xaf52f0, static NEVER = 0,
> static ALWAYS = 1, static factories = 0x1b92860, static names = 0x1b928a0,
> static time_counter = 211263, serial_type = 0},
> filename = 0x2216180 "/usr/local/bro/share/bro/base/frameworks/notice/./main.bro", first_line = 568, last_line = 636, first_column = 0, last_column = 0,
> delete_data = false, timestamp = 0, text = 0x0,
> static register_type = {<No data fields>}, tid = {id = 43643,
> static counter = 2684785}}
> ....
> (gdb) frame 48
> #48 0x00000000006d8cc2 in Event::Dispatch (this=0x4d194d0, no_remote=true)
> at /root/ane/bro/src/Event.h:50
> 50 /root/ane/bro/src/Event.h: No such file or directory.
> in /root/ane/bro/src/Event.h
> (gdb) print *this
> $35 = {<BroObj> = {<SerialObj> = {_vptr.SerialObj = 0xae2fb0,
> static NEVER = 0, static ALWAYS = 1, static factories = 0x1b92860,
> static names = 0x1b928a0, static time_counter = 211263,
> serial_type = 0}, in_ser_cache = false, location = 0x0,
> notify_plugins = false, ref_cnt = 1, static suppress_errors = 0},
> handler = {handler = 0x2ac0870}, args = 0x55665e0, src = 10001, aid = 0,
> mgr = 0x1bdbe70, obj = 0x0, next_event = 0x0}
> (gdb) frame 47
> #47 0x000000000072588b in EventHandler::Call (this=0x2ac0870, vl=0x55665e0,
> no_remote=true) at /root/ane/bro/src/EventHandler.cc:80
> 80 /root/ane/bro/src/EventHandler.cc: No such file or directory.
> in /root/ane/bro/src/EventHandler.cc
> (gdb) print *this
> $36 = {name = 0x2ac0c00 "SumStats::cluster_send_result", local = 0x2ac0a30,
> type = 0x2ac0600, used = false, enabled = true, error_handler = false,
> generate_always = false, receivers = {<BaseList> = {entry = 0x2ac0ba0,
> chunk_size = 10, max_entries = 10, num_entries = 0}, <No data fields>}}
> ----
> (gdb) bt full
> #0 0x0000003345c32625 in raise () from /lib64/libc.so.6
> No symbol table info available.
> #1 0x0000003345c33e05 in abort () from /lib64/libc.so.6
> No symbol table info available.
> #2 0x00000000007847d9 in Reporter::FatalError (this=0x1ba5490,
> fmt=0xaf4f56 "%s") at /root/ane/bro/src/Reporter.cc:92
> ap = {{gp_offset = 16, fp_offset = 48,
> overflow_arg_area = 0x7fff70b11a50,
> reg_save_area = 0x7fff70b11980}}
> #3 0x000000000078bfb4 in BroObj::BadTag (this=0x4edeb20,
> msg=0xaeaeae "Val::CONVERTER", t1=0xb05a89 "string", t2=0xb05aa3 "port")
> at /root/ane/bro/src/Obj.cc:134
> out = "Val::CONVERTER (string/port)\000\000\000\000R\000\000\000\000\000\000\000\360\035\261p\377\177\000\000\346\036\261p\377\177\000\000\000\000\000\000\003\000\000\000\340\032\261p\377\177\000\000
> out = "Val::CONVERTER (string/port)\000\000\000\000R\000\000\000\000\000\000\000\360\035\261p\377\177\000\000\346\036\261p\377\177\000\000\000\000\000\000\003\000\000\000\340\032\261p\377\177\000\000\346\036\261p\377\177\000\000\360\032\261p\377\177\000\000\350\036\261p\377\177\000\000u\350\065\005", '\000' <repeats 12 times>, "Ú‘\260\000\000\000\000\000\003\364\177", '\000' <repeats 13 times>, "@*=\005\
> \ \v\000\000\000\000\350\065\005\000\000\000\000\002\000\000\000\000\000\000\000`\033\261p\377\177\000\000)\016\200", '\000' <repeats 13 times>, "@*=\005\000\000\000\000\220*=\005\000\000\000\000\000\265K\005\0
> v\000\000\000\000\350\065\005\000\000\000\000\002\000\000\000\000\000\000\000`\033\261p\377\177\000\000)\016\200", '\000' <repeats 13 times>, "@*=\005\000\000\000\000\220*=\005\000\000\000\000\000\265K\005\000\000\000\000\220*=\005\000\000\000\000@*=\005\000\000\000\000\000\350\065\005\000\000\000\000\002\000\000\000\000\000\000\000\220"...
> d = {type = DESC_READABLE, style = STANDARD_STYLE, base = 0x58db560,
> offset = 37, size = 128, escape = false,
> escape_sequences = std::set with 0 elements, f = 0x0,
> indent_level = 0, is_short = 1, want_quotes = 0, do_flush = 1,
> include_stats = 0, indent_with_spaces = 0}
> #4 0x0000000000770c1c in Val::AsPortVal (this=0x4edeb20)
> at /root/ane/bro/src/Val.h:282
> No locals.
> #5 0x000000000075aecd in BifFunc::bro_get_port_transport_proto (
> frame=0x5862c60, BiF_ARGS=0x58f2d50) at bro.bif:3153
> p = 0xebd630
> #6 0x000000000074f3cd in BuiltinFunc::Call (this=0x217e940, args=0x58f2d50,
> parent=0x5862c60) at /root/ane/bro/src/Func.cc:564
> plugin_result = 0x0
> result = 0x7fff70b11ec0
> i = 0
> #7 0x0000000000740c4d in CallExpr::Eval (this=0x2299aa0, f=0x5862c60)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x217e940
> current_call = 0x22a2540
> ret = 0x0
> func_val = 0x217ea50
> v = 0x58f2d50
> #8 0x00000000007370b7 in AssignExpr::Eval (this=0x2299b50, f=0x5862c60)
> at /root/ane/bro/src/Expr.cc:2669
> v = 0x2299360
> #9 0x00000000007e22bf in ExprStmt::Exec (this=0x2299cc0, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b11fc0
> #10 0x00000000007e2b6f in IfStmt::DoExec (this=0x2299e20, f=0x5862c60,
> v=0x58b1870, flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:484
> do_stmt = 0x2299cc0
> result = 0x7e226e
> #11 0x00000000007e22f3 in ExprStmt::Exec (this=0x2299e20, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:373
> ret_val = 0x708008
> v = 0x58b1870
> #12 0x00000000007e8379 in StmtList::Exec (this=0x2293b70, f=0x5862c60,
> flow=@0x7fff70b12154) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 4
> #13 0x000000000074e6d5 in BroFunc::Call (this=0x22a1620, args=0x4fe5fc0,
> parent=0x55fc1e0) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 1
> flow = FLOW_NEXT
> f = 0x5862c60
> result = 0x0
> #14 0x0000000000740c4d in CallExpr::Eval (this=0x22a2540, f=0x55fc1e0)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x22a1620
> current_call = 0x21ec0e0
> ret = 0x0
> func_val = 0x22a1710
> v = 0x4fe5fc0
> #15 0x00000000007e22bf in ExprStmt::Exec (this=0x22a2660, f=0x55fc1e0,
> flow=@0x7fff70b12424) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b12330
> #16 0x00000000007e8379 in StmtList::Exec (this=0x22a2060, f=0x55fc1e0,
> flow=@0x7fff70b12424) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x4d629b0
> i = 0
> #17 0x000000000074e6d5 in BroFunc::Call (this=0x22a2cc0, args=0x5469570,
> parent=0x520ebc0) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 1
> flow = FLOW_NEXT
> f = 0x55fc1e0
> result = 0x0
> #18 0x0000000000740c4d in CallExpr::Eval (this=0x21ec0e0, f=0x520ebc0)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x22a2cc0
> current_call = 0x34236a0
> ret = 0x0
> func_val = 0x22a2db0
> v = 0x5469570
> #19 0x00000000007e22bf in ExprStmt::Exec (this=0x21e38e0, f=0x520ebc0,
> flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b12600
> #20 0x00000000007e2b6f in IfStmt::DoExec (this=0x21ed9a0, f=0x520ebc0,
> v=0x5382180, flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:484
> do_stmt = 0x21e38e0
> result = 0x7e226e
> #21 0x00000000007e22f3 in ExprStmt::Exec (this=0x21ed9a0, f=0x520ebc0,
> flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:373
> ret_val = 0x708008
> v = 0x5382180
> #22 0x00000000007e8379 in StmtList::Exec (this=0x21eaa60, f=0x520ebc0,
> flow=@0x7fff70b12794) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 1
> #23 0x000000000074e6d5 in BroFunc::Call (this=0x21ed440, args=0x509ca00,
> parent=0x53e1d50) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 1
> flow = FLOW_NEXT
> f = 0x520ebc0
> result = 0x0
> #24 0x0000000000740c4d in CallExpr::Eval (this=0x34236a0, f=0x53e1d50)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x21ed440
> current_call = 0x2a39e10
> ret = 0x0
> func_val = 0x21e3a50
> v = 0x509ca00
> #25 0x00000000007e22bf in ExprStmt::Exec (this=0x34237c0, f=0x53e1d50,
> flow=@0x7fff70b12a64) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b12970
> #26 0x00000000007e8379 in StmtList::Exec (this=0x341d8e0, f=0x53e1d50,
> flow=@0x7fff70b12a64) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 4
> #27 0x000000000074e6d5 in BroFunc::Call (this=0x3423a10, args=0x571e9e0,
> parent=0x4e16b50) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 2
> flow = FLOW_NEXT
> f = 0x53e1d50
> result = 0x0
> #28 0x0000000000740c4d in CallExpr::Eval (this=0x2a39e10, f=0x4e16b50)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x3423a10
> current_call = 0x2b62770
> ret = 0x0
> func_val = 0x3423b00
> v = 0x571e9e0
> #29 0x00000000007e22bf in ExprStmt::Exec (this=0x2a39f30, f=0x4e16b50,
> flow=@0x7fff70b12d84) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b12c40
> #30 0x00000000007e8379 in StmtList::Exec (this=0x2a36770, f=0x4e16b50,
> flow=@0x7fff70b12d84) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 3
> #31 0x00000000007e8379 in StmtList::Exec (this=0x2a39f80, f=0x4e16b50,
> flow=@0x7fff70b12d84) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 1
> #32 0x000000000074e6d5 in BroFunc::Call (this=0x2a3a050, args=0x4ff3bf0,
> parent=0x5682490) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 3
> flow = FLOW_NEXT
> f = 0x4e16b50
> result = 0x0
> #33 0x0000000000740c4d in CallExpr::Eval (this=0x2b62770, f=0x5682490)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x2a3a050
> current_call = 0x2bcf960
> ret = 0x0
> func_val = 0x2a3a290
> v = 0x4ff3bf0
> #34 0x00000000007e22bf in ExprStmt::Exec (this=0x2bbb7b0, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b12f60
> #35 0x00000000007e8379 in StmtList::Exec (this=0x2b606d0, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x8000e2
> i = 0
> #36 0x00000000007e2b6f in IfStmt::DoExec (this=0x2b6f010, f=0x5682490,
> v=0x2a33c00, flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:484
> do_stmt = 0x2b606d0
> result = 0x2bcf960
> #37 0x00000000007e22f3 in ExprStmt::Exec (this=0x2b6f010, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:373
> ret_val = 0x708008
> v = 0x2a33c00
> #38 0x00000000007e8379 in StmtList::Exec (this=0x2b69cb0, f=0x5682490,
> flow=@0x7fff70b13144) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 3
> #39 0x000000000074e6d5 in BroFunc::Call (this=0x2b08750, args=0x4cd7020,
> parent=0x51654a0) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 4
> flow = FLOW_NEXT
> f = 0x5682490
> result = 0x0
> #40 0x0000000000740c4d in CallExpr::Eval (this=0x2bcf960, f=0x51654a0)
> at /root/ane/bro/src/Expr.cc:4920
> func = 0x2b08750
> current_call = 0x0
> ret = 0x0
> func_val = 0x2bbdab0
> v = 0x4cd7020
> #41 0x00000000007e22bf in ExprStmt::Exec (this=0x2bcfa80, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:369
> v = 0x7fff70b13320
> #42 0x00000000007e8379 in StmtList::Exec (this=0x2bcf200, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x8000e2
> i = 0
> #43 0x00000000007e2b6f in IfStmt::DoExec (this=0x2bd04f0, f=0x51654a0,
> v=0x4e12040, flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:484
> do_stmt = 0x2bcf200
> result = 0x7e226e
> #44 0x00000000007e22f3 in ExprStmt::Exec (this=0x2bd04f0, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:373
> ret_val = 0x708008
> v = 0x4e12040
> #45 0x00000000007e8379 in StmtList::Exec (this=0x2bca5f0, f=0x51654a0,
> flow=@0x7fff70b13504) at /root/ane/bro/src/Stmt.cc:1764
> result = 0x0
> i = 3
> #46 0x000000000074e6d5 in BroFunc::Call (this=0x2ac0a30, args=0x55665e0,
> parent=0x0) at /root/ane/bro/src/Func.cc:386
> i = 0
> plugin_result = 0x0
> __PRETTY_FUNCTION__ = "virtual Val* BroFunc::Call(val_list*, Frame*) const"
> i = 5
> flow = FLOW_NEXT
> f = 0x51654a0
> result = 0x0
> #47 0x000000000072588b in EventHandler::Call (this=0x2ac0870, vl=0x55665e0,
> no_remote=true) at /root/ane/bro/src/EventHandler.cc:80
> No locals.
> #48 0x00000000006d8cc2 in Event::Dispatch (this=0x4d194d0, no_remote=true)
> at /root/ane/bro/src/Event.h:50
> No locals.
> #49 0x00000000006d8e41 in EventMgr::Dispatch (this=0xebdb60, event=0x4d194d0,
> no_remote=true) at /root/ane/bro/src/Event.h:98
> No locals.
> #50 0x00000000007a15f2 in RemoteSerializer::Process (this=0x1be4b00)
> at /root/ane/bro/src/RemoteSerializer.cc:1439
> be = 0x52f6520
> event = 0x4d194d0
> old_current_peer = 0x5affb90
> i = 2
> __PRETTY_FUNCTION__ = "virtual void RemoteSerializer::Process()"
> #51 0x00000000007889fc in net_run () at /root/ane/bro/src/Net.cc:320
> ts = 1426699810
> src = 0x1be4b28
> loop_counter = 0
> #52 0x00000000006d8157 in main (argc=16, argv=0x7fff70b13f98)
> at /root/ane/bro/src/main.cc:1200
> time_net_start = 1426699494.8306091
> mem_net_start_total = 0
> mem_net_start_malloced = 28969936
> time_net_done = 5.5884358079878406e-317
> mem_net_done_total = 32767
> mem_net_done_malloced = 1890663744
> rule_files = {<BaseList> = {entry = 0x3b21000, chunk_size = 20,
> max_entries = 20, num_entries = 16}, <No data fields>}
> id_name = 0x0
> seed_load_file = 0x0
> debug_streams = 0x0
> bare_mode = 0
> opts = "B:D:e:f:I:i:K:l:n:p:R:r:s:T:t:U:w:x:X:z:CFGLNOPSWabdghvZQ", '\000' <repeats 198 times>
> seed = 0
> r = 0
> missing_plugin = false
> bro_init = {handler = 0x1c02d90}
> long_optsind = 0
> s = 0x0
> bst_file = 0x0
> print_plugins = 0
> oldhandler = 0x1
> p = 0x0
> alive_handlers = 0x3bda980
> user_pcap_filter = 0x0
> op = -1
> tmp = 0x0
> dead_handlers = 0x3bda980
> time_start = 1426699493.1773551
> interfaces = {<BaseList> = {entry = 0x1ba5350, chunk_size = 10,
> max_entries = 10, num_entries = 0}, <No data fields>}
> read_files = {<BaseList> = {entry = 0x1ba53b0, chunk_size = 10,
> max_entries = 10, num_entries = 0}, <No data fields>}
> events_file = 0x0
> to_xml = 0
> RE_level = 4
> dns_type = DNS_DEFAULT
> broxygen_config = ""
> dump_cfg = 0
> do_watchdog = 0
> rule_debug = 0
> long_opts = {{name = 0xadae58 "parse-only", has_arg = 0, flag = 0x0,
> val = 97}, {name = 0xadae63 "bare-mode", has_arg = 0, flag = 0x0,
> val = 98}, {name = 0xadae6d "debug-policy", has_arg = 0,
> flag = 0x0, val = 100}, {name = 0xadae7a "dump-config",
> has_arg = 0, flag = 0x0, val = 103}, {name = 0xadae86 "exec",
> has_arg = 1, flag = 0x0, val = 101}, {name = 0xadae8b "filter",
> has_arg = 1, flag = 0x0, val = 102}, {name = 0xadae92 "help",
> has_arg = 0, flag = 0x0, val = 104}, {name = 0xadae97 "iface",
> has_arg = 1, flag = 0x0, val = 105}, {name = 0xadae9d "broxygen",
> has_arg = 1, flag = 0x0, val = 88}, {name = 0xadaea6 "prefix",
> has_arg = 1, flag = 0x0, val = 112}, {name = 0xadaead "readfile",
> has_arg = 1, flag = 0x0, val = 114}, {name = 0xadaeb6 "flowfile",
> has_arg = 1, flag = 0x0, val = 121}, {name = 0xadaebf "netflow",
> has_arg = 1, flag = 0x0, val = 89}, {name = 0xadaec7 "rulefile",
> has_arg = 1, flag = 0x0, val = 115}, {name = 0xadaed0 "tracefile",
> has_arg = 1, flag = 0x0, val = 116}, {name = 0xadaeda "writefile",
> has_arg = 1, flag = 0x0, val = 119}, {name = 0xadaee4 "version",
> has_arg = 0, flag = 0x0, val = 118}, {
> name = 0xadaeec "print-state", has_arg = 1, flag = 0x0,
> val = 120}, {name = 0xadaef8 "analyze", has_arg = 1, flag = 0x0,
> val = 122}, {name = 0xadaf00 "no-checksums", has_arg = 0,
> flag = 0x0, val = 67}, {name = 0xadaf0d "dfa-cache", has_arg = 1,
> flag = 0x0, val = 68}, {name = 0xadaf17 "force-dns", has_arg = 0,
> flag = 0x0, val = 70}, {name = 0xadaf21 "load-seeds", has_arg = 1,
> flag = 0x0, val = 71}, {name = 0xadaf2c "save-seeds", has_arg = 1,
> flag = 0x0, val = 72}, {name = 0xadaf37 "set-seed", has_arg = 1,
> flag = 0x0, val = 74}, {name = 0xadaf40 "md5-hashkey",
> has_arg = 1, flag = 0x0, val = 75}, {
> name = 0xadaf4c "rule-benchmark", has_arg = 0, flag = 0x0,
> val = 76}, {name = 0xadaf5b "print-plugins", has_arg = 0,
> flag = 0x0, val = 78}, {name = 0xadaf69 "optimize", has_arg = 0,
> flag = 0x0, val = 79}, {name = 0xadaf72 "prime-dns", has_arg = 0,
> flag = 0x0, val = 80}, {name = 0xadaf7c "replay", has_arg = 1,
> flag = 0x0, val = 82}, {name = 0xadaf83 "debug-rules",
> has_arg = 0, flag = 0x0, val = 83}, {name = 0xadaf8f "re-level",
> has_arg = 1, flag = 0x0, val = 82}, {name = 0xadaf98 "watchdog",
> has_arg = 0, flag = 0x0, val = 87}, {name = 0xadafa1 "print-id",
> has_arg = 1, flag = 0x0, val = 73}, {
> name = 0xadafaa "status-file", has_arg = 1, flag = 0x0, val = 85},
> {name = 0xadafb6 "debug", has_arg = 1, flag = 0x0, val = 66}, {
> name = 0xadafbc "pseudo-realtime", has_arg = 2, flag = 0x0,
> val = 69}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
> override_ignore_checksums = 0
> time_bro = 0
> seed_save_file = 0x0
> parse_only = 0
> script_rule_files = 0x3b20d70 ".state"
> (gdb) frame 0
> #0 0x0000003345c32625 in raise () from /lib64/libc.so.6
> (gdb) frame 3
> #3 0x000000000078bfb4 in BroObj::BadTag (this=0x4edeb20,
> msg=0xaeaeae "Val::CONVERTER", t1=0xb05a89 "string", t2=0xb05aa3 "port")
> at /root/ane/bro/src/Obj.cc:134
> 134 /root/ane/bro/src/Obj.cc: No such file or directory.
> in /root/ane/bro/src/Obj.cc
> (gdb) info local
> out = "Val::CONVERTER (string/port)\000\000\000\000R\000\000\000\000\000\000\000\360\035\261p\377\177\000\000\346\036\261p\377\177\000\000\000\000\000\000\003\000\000\000\340\032\261p\377\177\000\000\346\036
> out = "Val::CONVERTER (string/port)\000\000\000\000R\000\000\000\000\000\000\000\360\035\261p\377\177\000\000\346\036\261p\377\177\000\000\000\000\000\000\003\000\000\000\340\032\261p\377\177\000\000\346\036\261p\377\177\000\000\360\032\261p\377\177\000\000\350\036\261p\377\177\000\000u\350\065\005", '\000' <repeats 12 times>, "Ú‘\260\000\000\000\000\000\003\364\177", '\000' <repeats 13 times>, "@*=\005\v\000\00
> 0 00\000\000\350\065\005\000\000\000\000\002\000\000\000\000\000\000\000`\033\261p\377\177\000\000)\016\200", '\000' <repeats 13 times>, "@*=\005\000\000\000\000\220*=\005\000\000\000\000\000\265K\005\000\000\0
> 0\000\000\350\065\005\000\000\000\000\002\000\000\000\000\000\000\000`\033\261p\377\177\000\000)\016\200", '\000' <repeats 13 times>, "@*=\005\000\000\000\000\220*=\005\000\000\000\000\000\265K\005\000\000\000\000\220*=\005\000\000\000\000@*=\005\000\000\000\000\000\350\065\005\000\000\000\000\002\000\000\000\000\000\000\000\220"...
> d = {type = DESC_READABLE, style = STANDARD_STYLE, base = 0x58db560,
> offset = 37, size = 128, escape = false,
> escape_sequences = std::set with 0 elements, f = 0x0, indent_level = 0,
> is_short = 1, want_quotes = 0, do_flush = 1, include_stats = 0,
> indent_with_spaces = 0}
--
This message was sent by Atlassian JIRA
(v6.4-OD-15-055#64014)
More information about the bro-dev
mailing list