[Bro-Dev] #822: Segmentation fault ICMP Analizer

Bro Tracker bro at tracker.bro-ids.org
Sat May 26 05:28:37 PDT 2012


#822: Segmentation fault ICMP Analizer
-----------------------------+------------------------
  Reporter:  Tyler.Schoenke  |      Owner:
      Type:  Problem         |     Status:  new
  Priority:  Normal          |  Milestone:
 Component:  Bro             |    Version:  git/master
Resolution:                  |   Keywords:
-----------------------------+------------------------

Comment (by Tyler.Schoenke):

 This is crashing four workers on one server.  I'm using the cFlow to load
 balance, but sending the traffic to a single NIC on this server and using
 BPF filters to mask the MAC addresses so each worker sees their own.  Why
 does the ICMP crash all four workers?  Is BPF filtering happening after
 the protocol analysis or is it coincidence that four of the 12 src/dst
 tuples with the problem all happen to be on the same server?

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/822#comment:1>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker



More information about the bro-dev mailing list