[Bro] Assertion failure, Tag.cc

[Azoff, Justin S]

I've not seen that before.  Are you running any custom local scripts?

Do you still have the core file that it dumped?  There's a good chance gdb can be used to figure out what script triggered that assertion.

https://www.bro.org/support/reporting-problems.html outlines the process on how to use gdb against a bro core file.
-- 
- Justin Azoff

> On Apr 5, 2016, at 10:04 AM, Michael Fry <michael.fry at morphick.com> wrote:
> 
> Hi All,
> 
> Has anyone encountered the assertion failure below with Bro 2.4.1? This is happening with live traffic at least a couple times a day since upgrading from Bro 2.3.2. I didn't see anything the bug tracker, so thought I'd float it here first.
> 
> listening on zc:99 at 1, capture length 8192 bytes
> 
> 1459786307.312525 processing suspended
> 1459786307.312525 processing continued
> 1459802619.911190 Failed to open GeoIP City database: /usr/share/GeoIP/GeoIPCity.dat
> 1459802619.911190 Fell back to GeoIP Country database
> 1459802619.911190 Failed to open GeoIP Cityv6 database: /usr/share/GeoIP/GeoIPCityv6.dat
> bro: /home/mfry/dev/bro24/bro-2.4.1/src/Tag.cc:72: EnumVal* Tag::AsEnumVal(EnumType*) const: Assertion `type == 0 && subtype == 0' failed.
> /opt/bro/share/broctl/scripts/run-bro: line 100: 11312 Aborted                 (core dumped) nohup ${pin_command} $pin_cpu "$mybro" "$@"
> 
> Regards,
> Michael
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro