could be used to create an exploit.. [?] this is a redhat 6.1 box.
/usr/local/bin/nfdump -A srcip -N -f /data/etc/srcfilter -A dstip -N -f /data/etc/dstfilter -q -o fmt:S,%sa,%byt,%pkt,%fl -Rft-IC02RTR001-ipbill0201-2012-04-11.1815+1000.txt:ft-IC02RTR001-ipbill0201-2012-04-11.1845+1000.txt *** glibc detected *** /usr/local/bin/nfdump: free(): invalid next size (fast): 0x0000000000754270 *** ======= Backtrace: ========= /lib64/libc.so.6[0x3e728750c6] /usr/local/bin/nfdump[0x415873] /usr/local/bin/nfdump[0x402711] /lib64/libc.so.6(__libc_start_main+0xfd)[0x3e7281ecdd] /usr/local/bin/nfdump[0x401d79] ======= Memory map: ======== 00400000-0042c000 r-xp 00000000 fd:00 542091 /usr/local/bin/nfdump 0062b000-0062f000 rw-p 0002b000 fd:00 542091 /usr/local/bin/nfdump 0062f000-00775000 rw-p 00000000 00:00 0 [heap] 3d59c00000-3d59c16000 r-xp 00000000 fd:00 663737 /lib64/libgcc_s-4.4.6-20110824.so.1 3d59c16000-3d59e15000 ---p 00016000 fd:00 663737 /lib64/libgcc_s-4.4.6-20110824.so.1 3d59e15000-3d59e16000 rw-p 00015000 fd:00 663737 /lib64/libgcc_s-4.4.6-20110824.so.1 3e72400000-3e72420000 r-xp 00000000 fd:00 654531 /lib64/ld-2.12.so 3e7261f000-3e72620000 r--p 0001f000 fd:00 654531 /lib64/ld-2.12.so 3e72620000-3e72621000 rw-p 00020000 fd:00 654531 /lib64/ld-2.12.so 3e72621000-3e72622000 rw-p 00000000 00:00 0 3e72800000-3e72997000 r-xp 00000000 fd:00 654535 /lib64/libc-2.12.so 3e72997000-3e72b97000 ---p 00197000 fd:00 654535 /lib64/libc-2.12.so 3e72b97000-3e72b9b000 r--p 00197000 fd:00 654535 /lib64/libc-2.12.so 3e72b9b000-3e72b9c000 rw-p 0019b000 fd:00 654535 /lib64/libc-2.12.so 3e72b9c000-3e72ba1000 rw-p 00000000 00:00 0 3e75000000-3e75016000 r-xp 00000000 fd:00 661916 /lib64/libresolv-2.12.so 3e75016000-3e75216000 ---p 00016000 fd:00 661916 /lib64/libresolv-2.12.so 3e75216000-3e75217000 r--p 00016000 fd:00 661916 /lib64/libresolv-2.12.so 3e75217000-3e75218000 rw-p 00017000 fd:00 661916 /lib64/libresolv-2.12.so 3e75218000-3e7521a000 rw-p 00000000 00:00 0 7fc73f6bd000-7fc73f6c0000 rw-p 00000000 00:00 0 7fc73f6c7000-7fc73f6c9000 rw-p 00000000 00:00 0 7fff6e3e3000-7fff6e3f8000 rw-p 00000000 00:00 0 [stack] 7fff6e3ff000-7fff6e400000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted (core dumped)
<<347.gif>>
------------------------------------------------------------------------------ For Developers, A Lot Can Happen In A Second. Boundary is the first to Know...and Tell You. Monitor Your Applications in Ultra-Fine Resolution. Try it FREE! http://p.sf.net/sfu/Boundary-d2dvs2
_______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
