[sysmon-help] Frequently failing Sysmon ping tests...

[Daniel J. Luke]

On Jul 31, 2009, at 10:57 AM, Morgan Aldridge wrote:
> On Fri, Jul 31, 2009 at 10:22 AM, Daniel J. Luke<dluke at geeklair.net>  
> wrote:
>>
>> Do you have a CrashReporter log (in /Library/Logs/CrashReporter  
>> probably)?
>
> It appears to crash during/after one of the www tests and the crash
> log appears to confirm this. One of the crash logs is as follows:

I think this crash may be an overflow (print_err should probably be  
using vsnprintf instead of vsprintf), and since it's part of the  
debugging output, probably unrelated to the problems you are seeing  
with the ICMP tests.

> Process:         sysmond [99399]
> Path:            /usr/local/bin/sysmond
> Identifier:      sysmond
> Version:         ??? (???)
> Code Type:       X86 (Native)
> Parent Process:  launchd [1]
>
> Date/Time:       2009-07-31 07:57:48.223 -0400
> OS Version:      Mac OS X Server 10.5.3 (9D34)
> Report Version:  6
>
> Exception Type:  EXC_BAD_ACCESS (SIGABRT)
> Exception Codes: KERN_PROTECTION_FAILURE at 0x0000000000000050
> Crashed Thread:  0
>
> Thread 0 Crashed:
> 0   libSystem.B.dylib                   0x960b5b9e __kill + 10
> 1   libSystem.B.dylib                   0x9612cec2 raise + 26
> 2   libSystem.B.dylib                   0x9613c47f abort + 73
> 3   sysmond                             0x0000e10e ABORT + 94 (lib.c: 
> 233)
> 4   libSystem.B.dylib                   0x960b409b _sigtramp + 43
> 5   ???                                 0xffffffff 0 + 4294967295
> 6   libSystem.B.dylib                   0x961193a0 wcsrtombs_l + 100
> 7   libSystem.B.dylib                   0x96049c1e __vfprintf + 5834
> 8   libSystem.B.dylib                   0x96048210 vasprintf + 491
> 9   libSystem.B.dylib                   0x960a1337 vsyslog + 1181
> 10  libSystem.B.dylib                   0x960a0e98 syslog + 34
> 11  sysmond                             0x0000d348 syslogmsg + 120  
> (lib.c:716)
> 12  sysmond                             0x0000d46f print_err + 95  
> (lib.c:679)
> 13  sysmond                             0x0000f906 service_test_www +
> 422 (http.c:195)
> 14  sysmond                             0x000037a0 service_this + 816
> (syswatch.c:1102)
> 15  sysmond                             0x00003ce7 service_checks +
> 199 (syswatch.c:1335)
> 16  sysmond                             0x00004d6d do_watch + 173
> (syswatch.c:1587)
> 17  sysmond                             0x00005313 main + 1027  
> (syswatch.c:1964)
> 18  sysmond                             0x00001c16 start + 54
>
> Thread 0 crashed with X86 Thread State (32-bit):
>  eax: 0x00000000  ebx: 0x9613c43f  ecx: 0xbfffe44c  edx: 0x960b5b9e
>  edi: 0x00000000  esi: 0xbfffe4d0  ebp: 0xbfffe468  esp: 0xbfffe44c
>   ss: 0x0000001f  efl: 0x00000286  eip: 0x960b5b9e   cs: 0x00000007
>   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
>  cr2: 0x00000050
>
> Binary Images:
>    0x1000 -    0x26ff7 +sysmond ??? (???)
> <f4bc27c948834f9b580cc95399fe1fe0> /usr/local/bin/sysmond
>   0x38000 -    0x3bffc  libwrap.7.dylib ??? (???)
> <50d7ae449157ddf5d23f02335bbeef79> /usr/lib/libwrap.7.dylib
>   0x9d000 -   0x109ffc  libnetsnmp.15.dylib ??? (???)
> <5833273bbbefcef7e46d1552db854b10> /usr/lib/libnetsnmp.15.dylib
> 0x8fe00000 - 0x8fe2da53  dyld 96.2 (???)
> <06900973e83f70548b7a2a5fa6435865> /usr/lib/dyld
> 0x90b61000 - 0x90b90ff7  libncurses.5.4.dylib ??? (???)
> <3b2ac2ca8190942b6b81d2a7012ea859> /usr/lib/libncurses.5.4.dylib
> 0x9285a000 - 0x92878fff  libresolv.9.dylib ??? (???)
> <9602435a6eac87a0d1f41b8ca8541693> /usr/lib/libresolv.9.dylib
> 0x92a90000 - 0x92ab4feb  libssl.0.9.7.dylib ??? (???)
> <acee7fc534674498dcac211318aa23e8> /usr/lib/libssl.0.9.7.dylib
> 0x95185000 - 0x9518cfe9  libgcc_s.1.dylib ??? (???)
> <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib
> 0x954a6000 - 0x954aafff  libmathCommon.A.dylib ??? (???)
> /usr/lib/system/libmathCommon.A.dylib
> 0x96046000 - 0x961a6ff3  libSystem.B.dylib ??? (???)
> <a12f397abf2285077b89bd726bff5b18> /usr/lib/libSystem.B.dylib
> 0x97182000 - 0x97234ffb  libcrypto.0.9.7.dylib ??? (???)
> <330b0e48e67faffc8c22dfc069ca7a47> /usr/lib/libcrypto.0.9.7.dyl
> ib
> 0xffff0000 - 0xffff1780  libSystem.B.dylib ??? (???) /usr/lib/ 
> libSystem.B.dylib
>
>
> Morgan Aldridge
> ---
> morgant at makkintosshu.com
> http://www.makkintosshu.com/

--
Daniel J. Luke
+========================================================+
| *---------------- dluke at geeklair.net ----------------* |
| *-------------- http://www.geeklair.net -------------* |
+========================================================+
|   Opinions expressed are mine and do not necessarily   |
|          reflect the opinions of my employer.          |
+========================================================+



-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
URL: <https://puck.nether.net/pipermail/sysmon-help/attachments/20090731/2ff337aa/attachment-0001.bin>