Hi,
I am using tcpdump version 3.4a6 and libpcap version 0.4a6 on
linux
kernel 2.4.10. I was using libnet to write an application and everytime
I send an ICMP ECHO raw packet with its type changed (from 8 to 9)
tcpdump seg faults as shown below:
root@iceberg:/home/poshea/FYP/CODE/packetBlender/src > ./PacketBlender
-p icmp_echo -type 9
Constructing Packet IP
Constructing Packet ICMP
construction and injection completed, wrote all 28 bytes
[ICMP ECHO Header]
type: 9
code: 0
id: 242
seq: 0
data: NULL
data length: 0
root@iceberg:/home/poshea > tcpdump -vv -i lo
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on lo
Segmentation fault
root@iceberg:/home/poshea > gdb tcpdump
GNU gdb 5.0
Copyright 2000 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for
details.
This GDB was configured as "i386-suse-linux"...(no debugging symbols
found)...
(gdb) set args -vv -i lo
(gdb) r
Starting program: /usr/sbin/tcpdump -vv -i lo
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on lo
(no debugging symbols found)...(no debugging symbols found)...(no
debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x400795fe in vfprintf () from /lib/libc.so.6
(gdb) info reg
eax 0xbffff1ac -1073745492
ecx 0xbffff1ac -1073745492
edx 0xbffff28c -1073745268
ebx 0x40141828 1075058728
esp 0xbfffeb44 0xbfffeb44
ebp 0xbffff14c 0xbffff14c
esi 0xbfffece0 -1073746720
edi 0xc2 194
eip 0x400795fe 0x400795fe
eflags 0x210246 2163270
cs 0x23 35
ss 0x2b 43
ds 0x2b 43
es 0x2b 43
fs 0x0 0
gs 0x0 0
fctrl 0x37f 895
fstat 0x0 0
ftag 0xffff 65535
fiseg 0x23 35
fioff 0x4005f841 1074133057
foseg 0x2b 43
fooff 0xbffff424 -1073744860
---Type <return> to continue, or q <return> to quit---
fop 0x77d 1917
Regards,
P
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
