[sysmon-help] Sysmon dying

Richard van Katwijk richard at three6five.com
Fri Apr 1 04:43:06 EDT 2011


Finally got a core dump file:

----

(gdb) where
#0  0xb7764430 in __kernel_vsyscall ()
#1  0xb75e5651 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0xb75e8a82 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0x0805477c in ABORT () at lib.c:233
#4  <signal handler called>
#5  0xb7764430 in __kernel_vsyscall ()
#6  0xb75e5651 in raise () from /lib/tls/i686/cmov/libc.so.6
#7  0xb75e8a82 in abort () from /lib/tls/i686/cmov/libc.so.6
#8  0xb761c49d in ?? () from /lib/tls/i686/cmov/libc.so.6
#9  0xb769d390 in __fortify_fail () from /lib/tls/i686/cmov/libc.so.6
#10 0xb769d33a in __stack_chk_fail () from /lib/tls/i686/cmov/libc.so.6
#11 0x08062086 in handle_pingv6_responses () at pingv6.c:433
#12 0x0804ba4d in needssleep () at syswatch.c:915
#13 0x0804bf15 in do_watch (cmdname=0xbfd1c4f0 "sysmond", listenport=1345,
myhostname=0xbfd1bb6c "foreman") at syswatch.c:1549
#14 0x0804ca8d in main (argc=1, argv=0xbfd1bc84) at syswatch.c:1906

----



On 31 March 2011 23:36, Richard van Katwijk <richard at three6five.com> wrote:

> Ah, hang on:
>
> root at foreman /tmp # ulimit -a
> core file size          (blocks, -c) 0
> ....
>
> root at foreman /tmp # ulimit -c unlimited
> root at foreman /tmp # ulimit -a
> core file size          (blocks, -c) unlimited
> .....
>
> Lets see :) Live and learn.
>
>
>
> On 31 March 2011 23:33, Richard van Katwijk <richard at three6five.com>wrote:
>
>> This article contains some detail on when a core file may not be produced:
>> http://manpages.ubuntu.com/manpages/intrepid/man5/core.5.html
>>
>> I have been through each, and none should be the cause in my case.
>>
>> I have now started sysmon as root (the usual) in /tmp - lets see what it
>> does.....
>>
>>
>>
>> On 31 March 2011 23:08, Richard van Katwijk <richard at three6five.com>wrote:
>>
>>> :(
>>>
>>> root at foreman ~ # ulimit
>>> unlimited
>>> root at foreman ~ # ls /*core*
>>> ls: cannot access /*core*: No such file or directory
>>> root at foreman ~ # ls /root/*core*
>>> ls: cannot access /root/*core*: No such file or directory
>>> ----
>>>
>>> no 'limit' on ubuntu, i guess ulimit is right?
>>> also did a 'find' for *core* - nothing :(
>>>
>>>
>>>
>>> On 31 March 2011 23:00, Jared Mauch <jared at puck.nether.net> wrote:
>>>
>>>> can you send the output of 'limit' and ls /*core* and ls /root/*core*
>>>>
>>>> - Jared
>>>>
>>>> On Mar 31, 2011, at 4:56 PM, Richard van Katwijk wrote:
>>>>
>>>> > I cannot seem to find any core dump. I get:
>>>> >
>>>> > sysmond: 21:19:20 about to abort and dump core (i think in /)
>>>> >
>>>> > but cant find anything there. Any hints as to what the core file may
>>>> be named or where it may be?
>>>> >
>>>> >
>>>> > On 31 March 2011 17:20, Jared Mauch <jared at puck.nether.net> wrote:
>>>> > gdb /path/to/sysmond /path/to/corefile
>>>> >
>>>> > (gdb) where
>>>> >
>>>> > - Jared
>>>> >
>>>> > On Mar 31, 2011, at 11:19 AM, Richard van Katwijk wrote:
>>>> >
>>>> > > Hi Jared,
>>>> > >
>>>> > > I am not too familiar with gdb, do i need to run it as gbd sysmond
>>>> or attach gdb to the process id? Neither seem to give anything useful.
>>>> > >
>>>> > > On 31 March 2011 15:30, Jared Mauch <jared at puck.nether.net> wrote:
>>>> > > Can you gdb it and send the output of "where" to me?
>>>> > >
>>>> > > Jared Mauch
>>>> > >
>>>> > > On Mar 31, 2011, at 7:29 AM, Richard van Katwijk <
>>>> richard at three6five.com> wrote:
>>>> > >
>>>> > >> Hi, has anyone seen this before, or any idea what might cause it?
>>>> > >>
>>>> > >> My sysmon instance has been up and running for about a year, this
>>>> is the second time i am seeing this, though today it happens almost as soon
>>>> as i restart.
>>>> > >>
>>>> > >> Box is running Ubuntu 10.04 LTS and nothing has changed on that box
>>>> in ages.
>>>> > >>
>>>> > >> Richard
>>>> > >>
>>>> > >> ================================================================
>>>> > >>
>>>> > >> sysmond: 13:24:01 Starting sysmon v0.92.2
>>>> > >> *** stack smashing detected ***: /usr/local/bin/sysmond terminated
>>>> > >> ======= Backtrace: =========
>>>> > >> /lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xb775d390]
>>>> > >> /lib/tls/i686/cmov/libc.so.6(+0xe233a)[0xb775d33a]
>>>> > >> /usr/local/bin/sysmond[0x8062086]
>>>> > >> /usr/local/bin/sysmond[0x804ba4d]
>>>> > >> /usr/local/bin/sysmond[0x804bf15]
>>>> > >> /usr/local/bin/sysmond[0x804ca8d]
>>>> > >> /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb7691bd6]
>>>> > >> /usr/local/bin/sysmond[0x8049a71]
>>>> > >> ======= Memory map: ========
>>>> > >> 08048000-0806c000 r-xp 00000000 08:01 151
>>>>  /usr/local/bin/sysmond
>>>> > >> 0806c000-0806d000 r--p 00023000 08:01 151
>>>>  /usr/local/bin/sysmond
>>>> > >> 0806d000-0806e000 rw-p 00024000 08:01 151
>>>>  /usr/local/bin/sysmond
>>>> > >> 0806e000-08073000 rw-p 00000000 00:00 0
>>>> > >> 08900000-08940000 rw-p 00000000 00:00 0          [heap]
>>>> > >> b7641000-b765e000 r-xp 00000000 08:01 478        /lib/libgcc_s.so.1
>>>> > >> b765e000-b765f000 r--p 0001c000 08:01 478        /lib/libgcc_s.so.1
>>>> > >> b765f000-b7660000 rw-p 0001d000 08:01 478        /lib/libgcc_s.so.1
>>>> > >> b7660000-b7664000 r-xp 00000000 08:01 8150
>>>> /lib/tls/i686/cmov/libnss_dns-2.11.1.so
>>>> > >> b7664000-b7665000 r--p 00004000 08:01 8150
>>>> /lib/tls/i686/cmov/libnss_dns-2.11.1.so
>>>> > >> b7665000-b7666000 rw-p 00005000 08:01 8150
>>>> /lib/tls/i686/cmov/libnss_dns-2.11.1.so
>>>> > >> b766e000-b7678000 r-xp 00000000 08:01 8151
>>>> /lib/tls/i686/cmov/libnss_files-2.11.1.so
>>>> > >> b7678000-b7679000 r--p 00009000 08:01 8151
>>>> /lib/tls/i686/cmov/libnss_files-2.11.1.so
>>>> > >> b7679000-b767a000 rw-p 0000a000 08:01 8151
>>>> /lib/tls/i686/cmov/libnss_files-2.11.1.so
>>>> > >> b767a000-b767b000 rw-p 00000000 00:00 0
>>>> > >> b767b000-b77ce000 r-xp 00000000 08:01 8138
>>>> /lib/tls/i686/cmov/libc-2.11.1.so
>>>> > >> b77ce000-b77cf000 ---p 00153000 08:01 8138
>>>> /lib/tls/i686/cmov/libc-2.11.1.so
>>>> > >> b77cf000-b77d1000 r--p 00153000 08:01 8138
>>>> /lib/tls/i686/cmov/libc-2.11.1.so
>>>> > >> b77d1000-b77d2000 rw-p 00155000 08:01 8138
>>>> /lib/tls/i686/cmov/libc-2.11.1.so
>>>> > >> b77d2000-b77d5000 rw-p 00000000 00:00 0
>>>> > >> b77d5000-b77e8000 r-xp 00000000 08:01 8148
>>>> /lib/tls/i686/cmov/libnsl-2.11.1.so
>>>> > >> b77e8000-b77e9000 r--p 00012000 08:01 8148
>>>> /lib/tls/i686/cmov/libnsl-2.11.1.so
>>>> > >> b77e9000-b77ea000 rw-p 00013000 08:01 8148
>>>> /lib/tls/i686/cmov/libnsl-2.11.1.so
>>>> > >> b77ea000-b77ed000 rw-p 00000000 00:00 0
>>>> > >> b77ed000-b7802000 r-xp 00000000 08:01 8157
>>>> /lib/tls/i686/cmov/libpthread-2.11.1.so
>>>> > >> b7802000-b7803000 r--p 00014000 08:01 8157
>>>> /lib/tls/i686/cmov/libpthread-2.11.1.so
>>>> > >> b7803000-b7804000 rw-p 00015000 08:01 8157
>>>> /lib/tls/i686/cmov/libpthread-2.11.1.so
>>>> > >> b7804000-b7806000 rw-p 00000000 00:00 0
>>>> > >> b7806000-b7816000 r-xp 00000000 08:01 8158
>>>> /lib/tls/i686/cmov/libresolv-2.11.1.so
>>>> > >> b7816000-b7817000 r--p 00010000 08:01 8158
>>>> /lib/tls/i686/cmov/libresolv-2.11.1.so
>>>> > >> b7817000-b7818000 rw-p 00011000 08:01 8158
>>>> /lib/tls/i686/cmov/libresolv-2.11.1.so
>>>> > >> b7818000-b781a000 rw-p 00000000 00:00 0
>>>> > >> b7821000-b7824000 rw-p 00000000 00:00 0
>>>> > >> b7824000-b7825000 r-xp 00000000 00:00 0          [vdso]
>>>> > >> b7825000-b7840000 r-xp 00000000 08:01 636        /lib/ld-2.11.1.so
>>>> > >> b7840000-b7841000 r--p 0001a000 08:01 636        /lib/ld-2.11.1.so
>>>> > >> b7841000-b7842000 rw-p 0001b000 08:01 636        /lib/ld-2.11.1.so
>>>> > >> bf86e000-bf883000 rw-p 00000000 00:00 0          [stack]
>>>> > >> sysmond: 13:24:23 about to abort and dump core (i think in /root)
>>>> > >>
>>>> > >> _______________________________________________
>>>> > >> Sysmon-help mailing list
>>>> > >> Sysmon-help at puck.nether.net
>>>> > >> https://puck.nether.net/mailman/listinfo/sysmon-help
>>>> > >
>>>> >
>>>> >
>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/sysmon-help/attachments/20110401/58808bb0/attachment.html>


More information about the Sysmon-help mailing list