[Bro-Dev] #577: DNS analyzer doesn't use ProtocolViolation / ProtocolConfirmation

[Bro Tracker]

#577: DNS analyzer doesn't use ProtocolViolation / ProtocolConfirmation
----------------------+------------------------
  Reporter:  gregor   |      Owner:  robin
      Type:  Problem  |     Status:  reopened
  Priority:  Normal   |  Milestone:  Bro1.6
 Component:  Bro      |    Version:  git/master
Resolution:           |   Keywords:  BETA
----------------------+------------------------
Changes (by jsiwek):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 > In [6fe2b2c0f3d0bb16d21652e01c87b8d4fe5d97f5/bro]:
 > {{{
 > #!CommitTicketReference repository="bro"
 revision="6fe2b2c0f3d0bb16d21652e01c87b8d4fe5d97f5"
 > DNS now raises DPD events.
 >
 > Closes #577.
 > }}}

 With this change an assertion is hit when running the long external trace
 test:

 {{{
 Program received signal SIGABRT, Aborted.
 0x00007fff8aa5a82a in __kill ()
 (gdb) where
 #0  0x00007fff8aa5a82a in __kill ()
 #1  0x00007fff939d9a9c in abort ()
 #2  0x00007fff93a0c5de in __assert_rtn ()
 #3  0x00000001000dffd1 in Analyzer::~Analyzer (this=0x102650230) at
 Analyzer.cc:254
 #4  0x00000001002bcbc6 in
 TCP_ApplicationAnalyzer::~TCP_ApplicationAnalyzer (this=0x102650230) at
 TCP.h:266
 #5  0x00000001001393dc in DNS_Analyzer::~DNS_Analyzer (this=0x102650230)
 at DNS.cc:1132
 #6  0x00000001000daa40 in Analyzer::ForwardPacket (this=0x104526ab0,
 len=119, data=0x10126c62a "", is_orig=true, seq=-1, ip=0x7fff5fbfe448,
 caplen=119) at Analyzer.cc:440
 #7  0x0000000100384807 in UDP_Analyzer::DeliverPacket (this=0x104526ab0,
 len=119, data=0x10126c62a "", is_orig=true, seq=-1, ip=0x7fff5fbfe448,
 caplen=119) at UDP.cc:163
 #8  0x00000001000dfcec in Analyzer::NextPacket (this=0x104526ab0, len=127,
 data=0x10126c622 "\024?\024?", is_orig=true, seq=-1, ip=0x7fff5fbfe448,
 caplen=127) at Analyzer.cc:335
 #9  0x000000010012011a in Connection::NextPacket (this=0x1027e8580,
 t=1258615443.2526419, is_orig=1, ip=0x7fff5fbfe448, len=127, caplen=127,
 data=@0x7fff5fbfe310, record_packet=@0x7fff5fbfe2cc,
 record_content=@0x7fff5fbfe2c8, hdr=0x1020eee20, pkt=0x10126c600 "\001",
 hdr_size=14) at Conn.cc:246
 #10 0x000000010032aa47 in NetSessions::DoNextPacket (this=0x10218bf40,
 t=1258615443.2526419, hdr=0x1020eee20, ip_hdr=0x7fff5fbfe448,
 pkt=0x10126c600 "\001", hdr_size=14) at Sessions.cc:608
 #11 0x000000010032b104 in NetSessions::NextPacket (this=0x10218bf40,
 t=1258615443.2526419, hdr=0x1020eee20, pkt=0x10126c600 "\001",
 hdr_size=14, pkt_elem=0x0) at Sessions.cc:279
 #12 0x000000010032b593 in NetSessions::DispatchPacket (this=0x10218bf40,
 t=1258615443.2526419, hdr=0x1020eee20, pkt=0x10126c600 "\001",
 hdr_size=14, src_ps=0x1020eede0, pkt_elem=0x0) at Sessions.cc:228
 #13 0x000000010029a99b in net_packet_dispatch (t=1258615443.2526419,
 hdr=0x1020eee20, pkt=0x10126c600 "\001", hdr_size=14, src_ps=0x1020eede0,
 pkt_elem=0x0) at Net.cc:351
 #14 0x000000010029b0fe in net_packet_arrival (t=1258615443.2526419,
 hdr=0x1020eee20, pkt=0x10126c600 "\001", hdr_size=14, src_ps=0x1020eede0)
 at Net.cc:414
 #15 0x00000001002b8936 in PktSrc::Process (this=0x1020eede0) at
 PktSrc.cc:273
 #16 0x000000010029ad46 in net_run () at Net.cc:444
 #17 0x00000001000ce4c2 in main (argc=4, argv=0x7fff5fbff4d0) at
 main.cc:1009
 }}}

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/577#comment:3>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker