[Bro-Dev] [JIRA] (BIT-1562) Bro v2.4.1 lock with a old pcap file

[Justin Azoff (JIRA)]

    [ https://bro-tracker.atlassian.net/browse/BIT-1562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=25203#comment-25203 ] 

Justin Azoff commented on BIT-1562:
-----------------------------------

This looks like BIT-1443.

{code}
$ tcpdump -n -r bro241lock.pcap |cut -d ' ' -f 1|head
reading from file bro241lock.pcap, link-type EN10MB (Ethernet)
08:49:46.182640
08:49:46.182865
08:49:46.182889
08:49:46.182950
08:49:46.182970
08:49:46.183275
08:49:46.183942
-19:-28:-39.000718
-13:-6:-47.000718
08:49:46.183964
{code}

> Bro v2.4.1 lock with a old pcap file
> ------------------------------------
>
>                 Key: BIT-1562
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1562
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: 2.4
>         Environment: Tested on Ubuntu v14.04.4 LTS
>            Reporter: rmkml
>         Attachments: bro241lock.pcap.gz
>
>
> Hi,
> I have replayed many pcap files on Bro v2.4.1,
> but discovered one pcap "lock" bro process (bro never quit).
> Simply replay: bro241 -r bro241lock.pcap
>  <no error, bro never quit>
> Added -C or -b have same pb.
> Joigned gziped pcap file.
> (This partial file sended to bro list around 2009 not by me...)
> Regards
> @Rmkml



--
This message was sent by Atlassian JIRA
(v7.2.0-OD-04-029#72002)