[Bro] bro segfaults on startup

[Jean-Philippe Luiggi]

Hello,

Did you check your "bro.cfg" (/opt/bro/etc/bro.cfg, i think) ?

Best regards.

On Mon, Jan 09, 2006 at 11:50:27AM -0500, David Vasil wrote:
> Hello, I have an x86_64 RHEL4u2 running a 2.6.14.2 kernel on which I 
> compiled bro-1.0 with the following options:
> 
> ./configure --prefix=/opt/bro
> 
> And did a make install and make install-brolite to create a base 
> configuration.  After that I attempt to run /opt/bro/etc/bro.rc -start 
> which results in the following:
> 
> [root at endace bro]# etc/bro.rc start
> bro.rc: Running as non-root user bro
> bro.rc: Starting /opt/bro/etc/bro.rc: line 229:  6635 Segmentation fault 
>      "${BRO}" ${cmd_opts} 2>>"${info_log}" >>"${info_log}"
> ........bro.rc: Failed to start Bro
> ... FAILED
> [root at endace bro]# etc/bro.rc start
> bro.rc: Running as non-root user bro
> bro.rc: Starting /opt/bro/etc/bro.rc: line 229:  6721 Segmentation fault 
>      "${BRO}" ${cmd_opts} 2>>"${info_log}" >>"${info_log}"
> ........bro.rc: Failed to start Bro
> ... FAILED
> 
> In dmesg the following is shown:
> bro[6635]: segfault at 00000000fffcf678 rip 0000000000561ef5 rsp 
> 00000000fffcf650 error 4
> bro[6721]: segfault at 00000000ffaafa58 rip 0000000000561ef5 rsp 
> 00000000ffaafa30 error 4
> 
> In /var/log/messages the following is shown:
> Jan  9 11:38:34 endace su(pam_unix)[6598]: session opened for user bro 
> by root(uid=0)
> Jan  9 11:38:35 endace kernel: bro[6635]: segfault at 00000000fffcf678 
> rip 0000000000561ef5 rsp 00000000fffcf650 error 4
> Jan  9 11:38:40 endace bro.rc: Bro has failed to start. Unknown error, 
> no messages recieved on STDERR or STDOUT
> Jan  9 11:38:40 endace bro.rc: Bro process failed on first start 
> attempt.  No further restart attempts will be made.
> Jan  9 11:38:41 endace su(pam_unix)[6598]: session closed for user bro
> Jan  9 11:41:16 endace su(pam_unix)[6684]: session opened for user bro 
> by root(uid=0)
> Jan  9 11:41:16 endace kernel: bro[6721]: segfault at 00000000ffaafa58 
> rip 0000000000561ef5 rsp 00000000ffaafa30 error 4
> Jan  9 11:41:21 endace bro.rc: Bro has failed to start. Unknown error, 
> no messages recieved on STDERR or STDOUT
> Jan  9 11:41:21 endace bro.rc: Bro process failed on first start 
> attempt.  No further restart attempts will be made.
> Jan  9 11:41:22 endace su(pam_unix)[6684]: session closed for user bro
> 
> Notice, info, and alarm logfiles are created in bro's logs directory, 
> however, all of these files are empty.  I also tried the bro-0.9a11 
> branch, and it behaved the exact same way.  Am I missing something?  Thanks!
> 
> -- 
> | David Vasil <dmvasil at ornl.gov>
> | Oak Ridge National Laboratory NCCS Division
> | High Performance Computing Systems Administrator
> | Bldg: 5600-A115  Phone: (865)241-5562
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro