[Bro-Dev] Intermittent bro crashes

McMullan, Tim Tim.McMullan at sig.com
Tue Oct 16 07:30:52 PDT 2018


Good morning!

We have been seeing occasional core dumps from bro, currently running on 2.5-870.  We've tried a few things to reproduce it on-demand but haven't been successful.  We were wondering if you might have some insight into the crash.  This is the backtrace we get:

#0  TableEntryVal::ExpireAccessTime (this=0x9b349bd32ebb5614) at /hostname/bro-devel-src/src/Val.h:741
#1  TableVal::DoExpire (this=0x3955a40, t=1539447574.1403711) at /hostname/bro-devel-src/src/Val.cc:2353
#2  0x00000000006a34cb in PQ_TimerMgr::DoAdvance (this=0x2e520c0, new_t=1539447574.1403711, max_expire=300) at /hostname/bro-devel-src/src/Timer.cc:166
#3  0x0000000000664d38 in expire_timers (src_ps=src_ps at entry=0x2eab8c0) at /hostname/bro-devel-src/src/Net.cc:232
#4  0x0000000000664de1 in net_packet_dispatch (t=1539447574.1403711, pkt=pkt at entry=0x2eab8f0, src_ps=src_ps at entry=0x2eab8c0) at /hostname/bro-devel-src/src/Net.cc:249
#5  0x0000000000925a89 in iosource::PktSrc::Process (this=0x2eab8c0) at /hostname/bro-devel-src/src/iosource/PktSrc.cc:263
#6  0x00000000006652c5 in net_run () at /hostname/bro-devel-src/src/Net.cc:315
#7  0x00000000005acab1 in main (argc=<optimized out>, argv=<optimized out>) at /hostname/bro-devel-src/src/main.cc:1227

Thank you for your help!
--Tim

________________________________

IMPORTANT: The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.icsi.berkeley.edu/pipermail/bro-dev/attachments/20181016/2d5526e0/attachment.html 


More information about the bro-dev mailing list