[netflow-tools] reproducible flowd 0.9.1 crash

Michael W. Lucas mwlucas at blackhelicopters.org
Wed Nov 25 02:45:38 EST 2009


Hi,

Flowd 0.9.1 consistently crashes on my system after only a few
minutes.  Platform is FreeBSD 9/i386, on VMWare, booting diskless off
of an OpenSolaris ZFS filesystem.  We're accepting v9 from an HP
Procurve switch.

I have a /var/empty/dev/log, but no messages logged from flowd.

Run in debugging mode, the program ends with:

...
98.22.63.158]:53 dst [192.221.138.129]:63705 gateway [0.0.0.0] packets 1 octets 125 in_if 29 out_if 32 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.308 flow_finish 6w4d11h42m11s.308 
output_flow_enqueue: offset 8948 alloc 16384
netflow v.9 data flowset (len 104) source 0x00000001
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [192.167.90.2]:53 dst [198.22.63.130]:52715 packets 1 octets 244 in_if 32 out_if 0 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.325 flow_finish 6w4d11h42m11s.325 
output_flow_enqueue: offset 9032 alloc 16384
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [192.35.51.30]:53 dst [198.22.63.130]:64923 packets 1 octets 157 in_if 32 out_if 0 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.326 flow_finish 6w4d11h42m11s.326 
output_flow_enqueue: offset 9116 alloc 16384
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [192.35.51.30]:53 dst [198.22.63.130]:50591 packets 1 octets 141 in_if 32 out_if 0 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.327 flow_finish 6w4d11h42m11s.327 
output_flow_enqueue: offset 9200 alloc 16384
netflow v.9 data flowset (len 44) source 0x00000001
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [198.22.63.130]:51669 dst [192.167.90.1]:53 gateway [0.0.0.0] packets 1 octets 69 in_if 29 out_if 32 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.328 flow_finish 6w4d11h42m11s.328 
output_flow_enqueue: offset 9288 alloc 16384
output_flow_flush: flushing output queue len 9288
flowd_mainloop: monitor closed
Bus error (core dumped)

Any suggestions, folks?

Thanks,
==ml

-- 
Michael W. Lucas 	mwlucas at BlackHelicopters.org
http://www.MichaelWLucas.com/
Latest book:  Cisco Routers for the Desperate, 2nd Edition
http://www.CiscoRoutersForTheDesperate.com/


More information about the netflow-tools mailing list