On 8/5/12 5:22 PM, Nikolaos Milas wrote:
> On 8/5/2012 5:46 μμ, Peter Haag wrote:
>
>> May I ask you a few questions:
>> o how long is nfsend running before it segfaults?
>> o does the crash occur, while working with NfSen (using a web browser)?
>> o does the crash occur over night. ( nobody is working )
>>
>> It seems as a signal is not handled properly. I will check, if I can change
>> some Perl code.
>
> Thank you Peter,
>
> It can happen any time; nfsen will run from 12 hours to 6 days (max) and
> then it will hang unexpectedly. (nfdump works flawlessly all the time.)
So it hangs and does not die? or did I misunderstood something?
If it dies does it produce a core, you could backtrace?
Your backtrace seem to occur on a send socket command, which is deep in Perl
anyway. This connection is never supposed to hang as an alarm fires after
some time.
if it hangs, do you have any syslog messages from nfsen?
Can you connect to the socket:
socat UNIX-CONNECT:/path/to/nfsen.comm -
You should see something like:
220 1336497630 nfsend v0.1 ready
after 10s it should timeout automatically and close.
Besinde of that you can close the connection with ;
quit
.
How many nfsend processes are running while it hangs?
Maybe we can shed some light into that. On Debian Linux x86_64 and other
I never have seen such a behaviour.
- Peter
>
> I think there were cases where it happened when there was a user
> connected to the web interface (but not actively using it); yet it has
> *never* happened when the interface was being actively used for queries.
> It mostly (if not always) happens when no user is connected to the web
> interface. My experiments (for several weeks) do not show any
> association between browser use/connection/exit and appearance of the
> hang in nfsen. In short, it happens when nfsen is unattended.
>
> But I am wondering why there are no other reports of this issue by other
> administrators.
>
> If you want me to follow any specialized debugging process, I could
> follow your instructions.
>
> Thank you again for examining the hang.
>
> Nick
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
