I'm sorry for this problem! When I put 1.6.10 on sourceforge, I got the report already from another user. I immediately withdrawed the package and fixed the double free bug. Please pull a clean copy from sourceforge now. It's fixed.
Sorry for the inconvenience. - Peter On 18/5/13 9:02 AM, Evgheni Dereveanchin wrote: > Hi Peter, > > Thanks for the new release! > > Compiled it right away on CentOS 6.4 - it seems to collect deta OK, but I > receive segfaults when trying to search the data via nfsen: > > ---------------------------------------------------------------------------- > --------- > root@mon:~# nfdump -M /flow/nfsen/profiles-data/live/FW01 -T -r > 2013/05/17/nfcapd.201305171950 -a -B -c 20 > Date first seen Duration Proto Src IP Addr:Port Dst > IP Addr:Port Out Pkt In Pkt Out Byte In Byte Flows > <IP list displayed here, all looks OK> > Summary: total flows: 719998, total bytes: 215.9 M, total packets: 0, avg > bps: 5.8 M, avg pps: 0, avg bpp: 0 > Time window: 2013-05-17 19:50:02 - 2013-05-17 19:55:02 > Total flows processed: 719998, Blocks skipped: 0, Bytes read: 82083524 > Sys: 0.262s flows/second: 2738061.8 Wall: 0.264s flows/second: 2721698.0 > *** glibc detected *** nfdump: free(): invalid pointer: 0x00007f507c32e468 > *** > ======= Backtrace: ========= > /lib64/libc.so.6(+0x760e6)[0x7f507c0150e6] > nfdump[0x417ddf] > nfdump[0x402f17] > /lib64/libc.so.6(__libc_start_main+0xfd)[0x7f507bfbdcdd] > nfdump[0x401d89] > ======= Memory map: ======== > 00400000-00433000 r-xp 00000000 fd:00 15471 > /usr/local/bin/nfdump > 00633000-00636000 rw-p 00033000 fd:00 15471 > /usr/local/bin/nfdump > 00636000-0065c000 rw-p 00000000 00:00 0 > 01063000-01084000 rw-p 00000000 00:00 0 > [heap] > 7f5079b9a000-7f507a09b000 rw-p 00000000 00:00 0 > 7f507bd80000-7f507bd96000 r-xp 00000000 fd:00 46 > /lib64/libgcc_s-4.4.7-20120601.so.1 > 7f507bd96000-7f507bf95000 ---p 00016000 fd:00 46 > /lib64/libgcc_s-4.4.7-20120601.so.1 > 7f507bf95000-7f507bf96000 rw-p 00015000 fd:00 46 > /lib64/libgcc_s-4.4.7-20120601.so.1 > 7f507bf9e000-7f507bf9f000 rw-p 00000000 00:00 0 > 7f507bf9f000-7f507c129000 r-xp 00000000 fd:00 2876 > /lib64/libc-2.12.so > 7f507c129000-7f507c328000 ---p 0018a000 fd:00 2876 > /lib64/libc-2.12.so > 7f507c328000-7f507c32c000 r--p 00189000 fd:00 2876 > /lib64/libc-2.12.so > 7f507c32c000-7f507c32d000 rw-p 0018d000 fd:00 2876 > /lib64/libc-2.12.so > 7f507c32d000-7f507c332000 rw-p 00000000 00:00 0 > 7f507c332000-7f507c348000 r-xp 00000000 fd:00 2902 > /lib64/libresolv-2.12.so > 7f507c348000-7f507c548000 ---p 00016000 fd:00 2902 > /lib64/libresolv-2.12.so > 7f507c548000-7f507c549000 r--p 00016000 fd:00 2902 > /lib64/libresolv-2.12.so > 7f507c549000-7f507c54a000 rw-p 00017000 fd:00 2902 > /lib64/libresolv-2.12.so > 7f507c54a000-7f507c54c000 rw-p 00000000 00:00 0 > 7f507c54c000-7f507c56c000 r-xp 00000000 fd:00 2869 > /lib64/ld-2.12.so > 7f507c6de000-7f507c762000 rw-p 00000000 00:00 0 > 7f507c769000-7f507c76b000 rw-p 00000000 00:00 0 > 7f507c76b000-7f507c76c000 r--p 0001f000 fd:00 2869 > /lib64/ld-2.12.so > 7f507c76c000-7f507c76d000 rw-p 00020000 fd:00 2869 > /lib64/ld-2.12.so > 7f507c76d000-7f507c76e000 rw-p 00000000 00:00 0 > 7fff8523a000-7fff8524f000 rw-p 00000000 00:00 0 > [stack] > 7fff852a0000-7fff852a1000 r-xp 00000000 00:00 0 > [vdso] > ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 > [vsyscall] > Aborted > ---------------------------------------------------------------------------- > --------- > > Any advice on how to debug this? > > Regards, > Evgheni > -----Original Message----- > From: Peter Haag [mailto:[email protected]] > Sent: 17 May 2013 13:11 > To: '[email protected]'; nfsen-discuss ML > Subject: [Nfdump-discuss] nfdump-1.6.10 released > > Hi List, > Just to let you know - 1.6.10 is out: > > Maintainance/bugfix release. > You should update, if you use IPFIX, or ASA/NSEL > > - Fix SPARC compile/optimise bug > - Add output packet/bytes counter to global stat for NSEL flows ASA > 8.5 > Fixes stat problems in NfSen > - Add NSEL filter options xnet > - Modify extension descriptor code for nfdump1.7. > Still use 1.6 extension map layout for compatibility > - Add prototype for nfpcapd - pcap -> nfdump collector. > Converts traffoc directly to nfdump files. - experimental - not enabled > - Fix bug in ipfix module: uninitialised variable > - Cleanup syslog/LogError calls > - Fix minor non critical bugs and compile issues > > - Peter > -- > -- > Be nice to your netflow data > > ---------------------------------------------------------------------------- > -- > AlienVault Unified Security Management (USM) platform delivers complete > security visibility with the essential security capabilities. Easily and > efficiently configure, manage, and operate all of your security controls > from a single console and one unified framework. Download a free trial. > http://p.sf.net/sfu/alienvault_d2d > _______________________________________________ > Nfdump-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > > > > ------------------------------------------------------------------------------ > AlienVault Unified Security Management (USM) platform delivers complete > security visibility with the essential security capabilities. Easily and > efficiently configure, manage, and operate all of your security controls > from a single console and one unified framework. Download a free trial. > http://p.sf.net/sfu/alienvault_d2d > > > > _______________________________________________ > Nfdump-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > -- Be nice to your netflow data. Use NfSen and nfdump :) ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
