[Bro] Bro 1.2 under Solaris 8
Stephan
Stephan at rheoli.net
Fri Dec 1 01:30:41 PST 2006
Hi Robin
On Wed, Nov 29, 2006 at 06:58:11PM -0800, Robin Sommer wrote:
>
> On Wed, Nov 29, 2006 at 08:31 +0100, Stephan wrote:
>
...
>
> > I can compile it after some patching but it always core dump (as
> > more traffic is on the wire a faster it core dump).
>
> It's supposed to compile on Solaris without requiring patches. Can
> you send us the error messages as well as which tweaks you did to
> get it to compile?
You are right there only some small patches for library problems (see
attachment).
>
> Regarding the core dumps, can you compile a debug version (configure
> --enable-debug) and send a stack backtrace? (And one thing also
> worth trying is reading a larger trace instead of running live,
> which as said I've never tried on Solaris).
>
After compiling bro with --enable-debug the pstack output from a core dump looks the following:
---------------
core 'core' of 2012: bin/bro -i qfe0 mt
0003d610 _ZN11TransientIDC1Ev (afecb4, 1376, 1, 400, 0, 0) + 38
000c7c18 _ZN10ConnectionC1EP11NetSessionsP7HashKeydPK6ConnID (afeca4, afd6e0, afffe8, 41d15bfc, f69522c4, ffbef1a4) + 48
00234fb8 _ZN11NetSessions7NewConnEP7HashKeydPK6ConnIDPKhi (afd6e0, afffe8, 41d15bfc, f69522c4, ffbef26c, aee1fc) + 1ec
000cee78 _ZN14ConnCompressor11InstantiateEdP7HashKeyPK6IP_Hdr (ae88e8, 41d15bfc, f69522c4, afffe8, ffbef5a0, 0) + b8
000d185c _ZN14ConnCompressor13FirstFromOrigEdP7HashKeyPK6IP_HdrPK6tcphdr (ae88e8, 41d15bfc, f69522c4, afffe8, ffbef5a0, aee1fc) + 70
000d21e8 _ZN14ConnCompressor10NextPacketEdP7HashKeyPK6IP_HdrPK11pcap_pkthdrPKh (ae88e8, 41d15bfc, f69522c4, afffe8, ffbef5a0, aed1f8) + 7a0
002358c0 _ZN11NetSessions12DoNextPacketEdPK11pcap_pkthdrPK6IP_HdrPKhi (afd6e0, 41d15bfc, f69522c4, aed1f8, ffbef5a0, aee1da) + 828
00235f34 _ZN11NetSessions10NextPacketEdPK11pcap_pkthdrPKhiP17PacketSortElement (afd6e0, 41d15bfc, f69522c4, aed1f8, aee1da, e) + 1f8
00236374 _ZN11NetSessions14DispatchPacketEdPK11pcap_pkthdrPKhiP6PktSrcP17PacketSortElement (afd6e0, 41d15bfc, f69522c4, aed1f8, aee1da, e) + 300
001bfbbc _Z19net_packet_dispatchdPK11pcap_pkthdrPKhiP6PktSrcP17PacketSortElement (41d15bfc, f69522c4, aed1f8, aee1da, e, aed1c0) + 274
001bfed8 _Z18net_packet_arrivaldPK11pcap_pkthdrPKhiP6PktSrc (41d15bfc, f69522c4, aed1f8, aee1da, e, aed1c0) + d8
001d77a4 _ZN6PktSrc7ProcessEv (aed1c0, 8, 3f78b0, 41d15bfc, f69762aa, 3fb3a8) + 190
001c0764 _Z7net_runv (1, ffbefb1c, ffbefb84, 0, 22610, 73b40) + 1d0
00073db8 main (4, ffbefcdc, ffbefcf0, 4ac508, 0, 0) + 209c
00013f5c _start (0, 0, 0, 0, 0, 0) + 5c
---------------
I will try to made some traces on static pcap files.
> Robin
>
> --
> Robin Sommer * Phone +1 (510) 931-5555 * robin at icir.org
> LBNL/ICSI * Fax +1 (510) 666-2956 * www.icir.org
Best regards,
Stephan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bro-1.2.patch.tar.gz
Type: application/x-tar-gz
Size: 1526 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20061201/e4edbe75/attachment.bin
More information about the Bro
mailing list