[Bro] Bro Silent Crash

[James Lay]

On 2013-12-20 15:00, Andy Schworer wrote:
> Possibly a newb question, but "broctl status" is reporting bro is
> running, but broctl restart reportings taht bro was not running
> because it crashed.  Why the discrepancy? Also,
> log/current/stderr.log & srdout.log do not contain any information
> regarding the crash.  Is this crash info stored else where?
>
> Thanks
>
>> root at node4:/usr/local/bro# bin/broctl status
>> Name       Type       Host       Status        Pid  
>>  Peers  Started              
>> bro        standalone localhost  running       22880  0  
>>    06 Dec 23:49:28
>> root at node4:/usr/local/bro# bin/broctl restart
>> stopping ...
>> warning: cannot send mail
>> bro not running (was crashed)
>> starting ...
>> starting bro ...

How's your syslog lookin?

Dec 19 14:09:26 gateway kernel: bro[16591]: segfault at 0 ip (null) sp 
00007fffa051d1a8 error 14 in bro[400000+4e3000]

James