[netflow-tools] reproducible flowd 0.9.1 crash
Michael W. Lucas
mwlucas at blackhelicopters.org
Wed Nov 25 02:45:38 EST 2009
Hi,
Flowd 0.9.1 consistently crashes on my system after only a few
minutes. Platform is FreeBSD 9/i386, on VMWare, booting diskless off
of an OpenSolaris ZFS filesystem. We're accepting v9 from an HP
Procurve switch.
I have a /var/empty/dev/log, but no messages logged from flowd.
Run in debugging mode, the program ends with:
...
98.22.63.158]:53 dst [192.221.138.129]:63705 gateway [0.0.0.0] packets 1 octets 125 in_if 29 out_if 32 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.308 flow_finish 6w4d11h42m11s.308
output_flow_enqueue: offset 8948 alloc 16384
netflow v.9 data flowset (len 104) source 0x00000001
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [192.167.90.2]:53 dst [198.22.63.130]:52715 packets 1 octets 244 in_if 32 out_if 0 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.325 flow_finish 6w4d11h42m11s.325
output_flow_enqueue: offset 9032 alloc 16384
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [192.35.51.30]:53 dst [198.22.63.130]:64923 packets 1 octets 157 in_if 32 out_if 0 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.326 flow_finish 6w4d11h42m11s.326
output_flow_enqueue: offset 9116 alloc 16384
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [192.35.51.30]:53 dst [198.22.63.130]:50591 packets 1 octets 141 in_if 32 out_if 0 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.327 flow_finish 6w4d11h42m11s.327
output_flow_enqueue: offset 9200 alloc 16384
netflow v.9 data flowset (len 44) source 0x00000001
process_flow: ACCEPT flow FLOW recv_time 2009-11-24T10:40:01.716915 proto 17 tcpflags 00 tos 00 agent [198.22.63.129] src [198.22.63.130]:51669 dst [192.167.90.1]:53 gateway [0.0.0.0] packets 1 octets 69 in_if 29 out_if 32 sys_uptime_ms 6w4d11h43m11s.638 time_sec 2009-11-24T11:25:49 time_nanosec 0 netflow ver 9 flow_start 6w4d11h42m11s.328 flow_finish 6w4d11h42m11s.328
output_flow_enqueue: offset 9288 alloc 16384
output_flow_flush: flushing output queue len 9288
flowd_mainloop: monitor closed
Bus error (core dumped)
Any suggestions, folks?
Thanks,
==ml
--
Michael W. Lucas mwlucas at BlackHelicopters.org
http://www.MichaelWLucas.com/
Latest book: Cisco Routers for the Desperate, 2nd Edition
http://www.CiscoRoutersForTheDesperate.com/
More information about the netflow-tools
mailing list