[Bro] Bro crashes regularly

Will Urbanski urbanski at vt.edu
Wed Sep 7 06:21:22 PDT 2011


Hello! I am experiencing an issue where bro regularly crashes. A crash
log is appended to this email. I am running a recent version of bro
checked out of GIT last week. The OS is FreeBSD 8.2 x64.

If there is no bug fix at this time, does anyone have a script that will
check if bro has crashed and will restart in broctl? If the workers have
crashed and I run 'check' in broctl it says that all workers and proxys
are OK, but then if i do 'restart' it says that they have crashed. This
might be another bug.

Any info / tips would be greatly appreciated.

Cheers,

Will

-------- Original Message --------
Subject: [Bro] Crash report from proxy-1
Date: Wed, 07 Sep 2011 09:17:51 -0400 (EDT)
From: Big Brother
To:

bro.core
Core was generated by `bro'.
Program terminated with signal 11, Segmentation fault.
#0  LogMgr::FindWriter (this=0x7cb3c0, writer=0x16cd260) at
/usr/home/sensor/bro/src/LogMgr.cc:447
447				if ( winfo->writer == writer )
#0  LogMgr::FindWriter (this=0x7cb3c0, writer=0x16cd260) at
/usr/home/sensor/bro/src/LogMgr.cc:447
#1  0x000000000053da1d in LogMgr::FinishedRotation (this=0x7cb3c0,
writer=) at /usr/home/sensor/bro/src/LogMgr.cc:1508
#2  0x00000000005459e4 in LogWriter::FinishedRotation (this=0x16cd260,
new_name=@0x7fffffffe190, old_name=) at
/usr/home/sensor/bro/src/LogWriter.cc:157
#3  0x0000000000546fa0 in LogWriterAscii::DoRotate (this=0x16cd260,
rotated_path=) at /usr/home/sensor/bro/src/LogWriterAscii.cc:257
#4  0x0000000000545d03 in LogWriter::Rotate (this=0x16cd260,
rotated_path=) at /usr/home/sensor/bro/src/LogWriter.cc:95
#5  0x000000000053e3d8 in LogMgr::Rotate (this=) at
/usr/home/sensor/bro/src/LogMgr.cc:1499
#6  0x000000000053ec6d in RotationTimer::Dispatch (this=0x16d13e8, t=)
at /usr/home/sensor/bro/src/LogMgr.cc:1409
#7  0x00000000005b8720 in PQ_TimerMgr::DoAdvance (this=0x7c2968,
new_t=1315368000.0016401, max_expire=300) at
/usr/home/sensor/bro/src/Timer.cc:164
#8  0x0000000000556182 in expire_timers (src_ps=0x0) at
/usr/home/sensor/bro/src/Net.cc:310
#9  0x00000000005568e9 in net_run () at /usr/home/sensor/bro/src/Net.cc:479
#10 0x00000000004688da in main (argc=22254392, argv=) at
/usr/home/sensor/bro/src/main.cc:1011

==== No reporter.log

==== stderr.log
/usr/local/bro/share/broctl/scripts/run-bro: line 62:  9144 Segmentation
fault: 11  (core dumped) nohup $mybro $@

==== stdout.log
unlimited
33554432
unlimited

==== .cmdline
-U .status -p broctl -p broctl-live -p local -p proxy-1 broctl
broctl/nodes/proxy local

==== .env_vars
PATH=/usr/local/bro/bin:/usr/local/bro/share/broctl/scripts:/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/home/sensor/bin
BROPATH=/usr/local/bro/spool/policy/site:/usr/local/bro/spool/policy/auto:/usr/local/bro/share/bro:/usr/local/bro/share/bro/policy:/usr/local/bro/share/bro/site
CLUSTER_NODE=proxy-1

==== .status
RUNNING [net_run]

==== No prof.log

==== No packet_filter.log

==== No loaded_scripts.log

-- 
[Automatically generated.]




More information about the Bro mailing list