[Bro] Fwd: Crash report from bro

[Robin Sommer]

On Thu, Feb 11, 2010 at 12:50 -0600, Joe Klemencic wrote:

> This happens whenever broctl cron is run.

That's only a symptom: "broctl cron" checks whether Bro has crashed;
if so, it mails out the crash report. The crash itself is quite
certainly not triggered by "cron" but has occured earlier.

> Program terminated with signal 11, Segmentation fault.
> #0  FragTimer::ClearReassembler (this=0x11ae9c70) at Frag.h:62
> 62		void ClearReassembler()	{ f = 0; }

Don't know what's causing this but it seems to be related to IP
fragments in some form. Are you able to reproduce this offline from
a trace captured with tcpdump? 

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org