[Bro] Bro workers die

Michal Purzynski michal at rsbac.org
Mon Apr 22 14:01:50 PDT 2013


On 4/22/13 10:58 PM, Seth Hall wrote:
> On Apr 22, 2013, at 4:51 PM, Michal Purzynski <michal at rsbac.org> wrote:
>
>> I'm running the SVN code, so you think it does not choose a unique cluster id for eth4 and another for eth5? How can i fix it?
>
> I don't know if that's fixed in master yet (i'm assuming you're running git master).
>
>> broctl diag nsm1-eth5-1
> That shows the process is running fine.  You need to do that for a worker that is crashed.
>
>    
Right, just noticed the stack traces.

root at nsm1:/nsm/bro/logs/current# broctl diag nsm1-eth5-9
[nsm1-eth5-9]

Bro 2.1-386

core
[New LWP 54717]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/opt/bro/bin/bro -i eth5 -U .status -p broctl -p 
broctl-live -p local -p nsm1-e'.
Program terminated with signal 11, Segmentation fault.
#0  AsBool (this=0x0) at scan.l:1074

Thread 1 (Thread 0x7f3af913d740 (LWP 54717)):
#0  AsBool (this=0x0) at scan.l:1074
#1  do_atif (expr=<optimized out>) at scan.l:686
#2  0x000000000051c95e in yyparse () at parse.y:1203
#3  0x00000000004c615e in main (argc=18, argv=<optimized out>) at 
/home/michal/bro/src/main.cc:801

==== No reporter.log

==== stderr.log
error in /opt/bro/share/bro/base/frameworks/cluster/./main.bro, line 
136: no such index (Cluster::nodes[Cluster::node])
warning in /opt/bro/share/bro/base/frameworks/notice/./cluster.bro, line 
23: non-void function returns without a value: Cluster::local_node_type
/opt/bro/share/broctl/scripts/run-bro: line 60: 54717 Segmentation 
fault      (core dumped) nohup $mybro $@

==== stdout.log
unlimited
unlimited
unlimited

==== .cmdline
-i eth5 -U .status -p broctl -p broctl-live -p local -p nsm1-eth5-9 
local.bro broctl base/frameworks/cluster local-worker.bro broctl/auto

==== .env_vars
PATH=/opt/bro/bin:/opt/bro/share/broctl/scripts:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
BROPATH=/nsm/bro/spool/installed-scripts-do-not-touch/site::/nsm/bro/spool/installed-scripts-do-not-touch/auto:/opt/bro/share/bro:/opt/bro/share/bro/policy:/opt/bro/share/bro/site
CLUSTER_NODE=nsm1-eth5-9

==== .status
INITIALIZING [main]

==== No prof.log

==== No packet_filter.log

==== No loaded_scripts.log
You have new mail in /var/mail/root
root at nsm1:/nsm/bro/logs/current# broctl diag nsm1-eth4-1
[nsm1-eth4-1]

Bro 2.1-386

core
[New LWP 54008]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/opt/bro/bin/bro -i eth4 -U .status -p broctl -p 
broctl-live -p local -p nsm1-e'.
Program terminated with signal 11, Segmentation fault.
#0  AsBool (this=0x0) at scan.l:1074

Thread 1 (Thread 0x7ff6c1d0f740 (LWP 54008)):
#0  AsBool (this=0x0) at scan.l:1074
#1  do_atif (expr=<optimized out>) at scan.l:686
#2  0x000000000051c95e in yyparse () at parse.y:1203
#3  0x00000000004c615e in main (argc=18, argv=<optimized out>) at 
/home/michal/bro/src/main.cc:801

==== No reporter.log

==== stderr.log
error in /opt/bro/share/bro/base/frameworks/cluster/./main.bro, line 
136: no such index (Cluster::nodes[Cluster::node])
warning in /opt/bro/share/bro/base/frameworks/notice/./cluster.bro, line 
23: non-void function returns without a value: Cluster::local_node_type
/opt/bro/share/broctl/scripts/run-bro: line 60: 54008 Segmentation 
fault      (core dumped) nohup $mybro $@

==== stdout.log
unlimited
unlimited
unlimited

==== .cmdline
-i eth4 -U .status -p broctl -p broctl-live -p local -p nsm1-eth4-1 
local.bro broctl base/frameworks/cluster local-worker.bro broctl/auto

==== .env_vars
PATH=/opt/bro/bin:/opt/bro/share/broctl/scripts:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
BROPATH=/nsm/bro/spool/installed-scripts-do-not-touch/site::/nsm/bro/spool/installed-scripts-do-not-touch/auto:/opt/bro/share/bro:/opt/bro/share/bro/policy:/opt/bro/share/bro/site
CLUSTER_NODE=nsm1-eth4-1

==== .status
INITIALIZING [main]

==== No prof.log

==== No packet_filter.log

==== No loaded_scripts.log
root at nsm1:/nsm/bro/logs/current#




More information about the Bro mailing list