[Bro] Bro 1.2 under Solaris 8

Stephan Stephan at rheoli.net
Fri Dec 1 01:30:41 PST 2006


Hi Robin

On Wed, Nov 29, 2006 at 06:58:11PM -0800, Robin Sommer wrote:
> 
> On Wed, Nov 29, 2006 at 08:31 +0100, Stephan wrote:
> 
...
> 
> > I can compile it after some patching but it always core dump (as
> > more traffic is on the wire a faster it core dump).
> 
> It's supposed to compile on Solaris without requiring patches. Can
> you send us the error messages as well as which tweaks you did to
> get it to compile?

You are right there only some small patches for library problems (see
attachment).

> 
> Regarding the core dumps, can you compile a debug version (configure
> --enable-debug) and send a stack backtrace? (And one thing also
> worth trying is reading a larger trace instead of running live,
> which as said I've never tried on Solaris). 
> 

After compiling bro with --enable-debug the pstack output from a core dump looks the following:
---------------
core 'core' of 2012:    bin/bro -i qfe0 mt
 0003d610 _ZN11TransientIDC1Ev (afecb4, 1376, 1, 400, 0, 0) + 38
 000c7c18 _ZN10ConnectionC1EP11NetSessionsP7HashKeydPK6ConnID (afeca4, afd6e0, afffe8, 41d15bfc, f69522c4, ffbef1a4) + 48
 00234fb8 _ZN11NetSessions7NewConnEP7HashKeydPK6ConnIDPKhi (afd6e0, afffe8, 41d15bfc, f69522c4, ffbef26c, aee1fc) + 1ec
 000cee78 _ZN14ConnCompressor11InstantiateEdP7HashKeyPK6IP_Hdr (ae88e8, 41d15bfc, f69522c4, afffe8, ffbef5a0, 0) + b8
 000d185c _ZN14ConnCompressor13FirstFromOrigEdP7HashKeyPK6IP_HdrPK6tcphdr (ae88e8, 41d15bfc, f69522c4, afffe8, ffbef5a0, aee1fc) + 70
 000d21e8 _ZN14ConnCompressor10NextPacketEdP7HashKeyPK6IP_HdrPK11pcap_pkthdrPKh (ae88e8, 41d15bfc, f69522c4, afffe8, ffbef5a0, aed1f8) + 7a0
 002358c0 _ZN11NetSessions12DoNextPacketEdPK11pcap_pkthdrPK6IP_HdrPKhi (afd6e0, 41d15bfc, f69522c4, aed1f8, ffbef5a0, aee1da) + 828
 00235f34 _ZN11NetSessions10NextPacketEdPK11pcap_pkthdrPKhiP17PacketSortElement (afd6e0, 41d15bfc, f69522c4, aed1f8, aee1da, e) + 1f8
 00236374 _ZN11NetSessions14DispatchPacketEdPK11pcap_pkthdrPKhiP6PktSrcP17PacketSortElement (afd6e0, 41d15bfc, f69522c4, aed1f8, aee1da, e) + 300
 001bfbbc _Z19net_packet_dispatchdPK11pcap_pkthdrPKhiP6PktSrcP17PacketSortElement (41d15bfc, f69522c4, aed1f8, aee1da, e, aed1c0) + 274
 001bfed8 _Z18net_packet_arrivaldPK11pcap_pkthdrPKhiP6PktSrc (41d15bfc, f69522c4, aed1f8, aee1da, e, aed1c0) + d8
 001d77a4 _ZN6PktSrc7ProcessEv (aed1c0, 8, 3f78b0, 41d15bfc, f69762aa, 3fb3a8) + 190
 001c0764 _Z7net_runv (1, ffbefb1c, ffbefb84, 0, 22610, 73b40) + 1d0
 00073db8 main     (4, ffbefcdc, ffbefcf0, 4ac508, 0, 0) + 209c
 00013f5c _start   (0, 0, 0, 0, 0, 0) + 5c
---------------

I will try to made some traces on static pcap files.

> Robin
> 
> -- 
> Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org 
> LBNL/ICSI    * Fax   +1 (510) 666-2956 *   www.icir.org


Best regards,
Stephan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: bro-1.2.patch.tar.gz
Type: application/x-tar-gz
Size: 1526 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20061201/e4edbe75/attachment.bin 


More information about the Bro mailing list