Hi,
We are using your ssldump to decrypt the SSL traffic and we get
"segmentation fault" and also it core dumps.
- Operating system: Red Hat Linux el4 i386, update 4.
- The key that's being used: 3 chained certificates as an extended
certificate signed by VeriSign Class 3 Extended Validation SSL SGS CA.
- The ssldump we tried: ssldump-0.9-0.beta3.1.2.el4.rf.i386.rpm
<ftp://fr2.rpmfind.net/linux/dag/redhat/el4/en/i386/dag/RPMS/ssldump-0.9
-0.beta3.1.2.el4.rf.i386.rpm> and ssldump-0.9-0.beta3.2.el4.rf.i386.rpm
<ftp://fr2.rpmfind.net/linux/dag/redhat/el4/en/i386/dag/RPMS/ssldump-0.9
-0.beta3.2.el4.rf.i386.rpm> .
- This RPM is intended to be used in C++ code.
- This fails only with this particular perm key and halts the
application.
http://fr2.rpmfind.net/linux/rpm2html/search.php?query=ssldump
Please see the output of different core dumps generated by the ssldump.
We are in desperate to resolve this issue and any help/insight would be
greatly appreciated as this is an urgent issue.
Thanks a lot for your quick response.
<<core22039.txt>> <<core6582.txt>> <<core12193.txt>>
Kind Regards,
Vasu.
[r...@rsl32xeoall01 tim]# LD_LIBRARY_PATH=lib gdb bin/tim /home/vasu/core/core.
core.18340 core.22039 core.6582
[r...@rsl32xeoall01 tim]# LD_LIBRARY_PATH=lib gdb bin/tim
/home/vasu/core/core.22039
GNU gdb Red Hat Linux (6.3.0.0-1.132.EL4rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db
library "/lib/tls/libthread_db.so.1".
Core was generated by `/etc/wily/cem/tim/bin/tim -traceconnections
-tracessldebug'.
Program terminated with signal 11, Segmentation fault.
warning: .dynamic section for "/lib/libssl.so.4" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libpcap.so.0.8.3" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libpcre.so.0" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libexpat.so.0" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libm.so.6" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libgcc_s.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libc.so.6" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/i686/libdb-4.2.so" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libgssapi_krb5.so.2" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libkrb5.so.3" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libcom_err.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libk5crypto.so.3" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libresolv.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libcrypto.so.4" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libdl.so.2" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libz.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libpthread.so.0" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/ld-linux.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/librt.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libnsl.so.1" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
Reading symbols from /usr/local/wily/cem/tim/lib/libtimcommon.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimcommon.so
Reading symbols from /lib/libssl.so.4...done.
Loaded symbols for /lib/libssl.so.4
Reading symbols from /usr/lib/libpcap.so.0.8.3...done.
Loaded symbols for /usr/lib/libpcap.so.0.8.3
Reading symbols from /lib/libpcre.so.0...done.
Loaded symbols for /lib/libpcre.so.0
Reading symbols from /usr/lib/libexpat.so.0...done.
Loaded symbols for /usr/lib/libexpat.so.0
Reading symbols from /usr/lib/libnspr4.so...done.
Loaded symbols for /usr/lib/libnspr4.so
Reading symbols from /usr/lib/libplc4.so...done.
Loaded symbols for /usr/lib/libplc4.so
Reading symbols from /usr/local/wily/cem/tim/lib/libxerces-c.so.28...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libxerces-c.so.28
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/client/libjvm.so...done.
Loaded symbols for /etc/jdk/jre/lib/i386/client/libjvm.so
Reading symbols from /usr/local/wily/cem/tim/lib/libtimwebserver.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimwebserver.so
Reading symbols from /usr/local/wily/cem/tim/lib/libtimanalysis.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimanalysis.so
Reading symbols from /usr/lib/libstdc++.so.5...done.
Loaded symbols for /usr/lib/libstdc++.so.5
Reading symbols from /lib/tls/libm.so.6...done.
Loaded symbols for /lib/tls/libm.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /lib/tls/i686/libdb-4.2.so...done.
Loaded symbols for /lib/tls/i686/libdb-4.2.so
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/tls/libpthread.so.0...done.
Loaded symbols for /lib/tls/libpthread.so.0
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/tls/librt.so.1...done.
Loaded symbols for /lib/tls/librt.so.1
Reading symbols from
/opt/jdk1.6.0_12/jre/lib/i386/native_threads/libhpi.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/native_threads/libhpi.so
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libverify.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libverify.so
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libjava.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libjava.so
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libzip.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libzip.so
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
#0 0x00219bf5 in ssl_generate_keying_material (ssl=0x8c5f748, d=0x8c54c20) at
ssl/ssldecode.c:844
844 ssl/ssldecode.c: No such file or directory.
in ssl/ssldecode.c
(gdb) where
#0 0x00219bf5 in ssl_generate_keying_material (ssl=0x8c5f748, d=0x8c54c20) at
ssl/ssldecode.c:844
#1 0x002191b0 in ssl_restore_session (ssl=0x8c5f748, d=0x8c54c20) at
ssl/ssldecode.c:458
#2 0x00218ed8 in ssl_process_server_session_id (ssl=0x8c5f748, d=0x8c54c20,
msg=0x8c4cc14 "", len=0) at ssl/ssldecode.c:300
#3 0x0021bd82 in decode_HandshakeType_ServerHello (ssl=0x8c5f748, dir=2,
seg=0xafc97ff0, data=0xafc97ea8) at ssl/ssl.enums.c:305
#4 0x0021a5c2 in ssl_decode_switch (ssl=0x8c5f748, dtable=0x249438,
value=147147808, dir=2, seg=0xafc97ff0, data=0xafc97ea8) at ssl/sslprint.c:251
#5 0x0021b992 in decode_ContentType_Handshake (ssl=0x8c5f748, dir=2,
seg=0xafc97ff0, data=0xafc97f30) at ssl/ssl.enums.c:138
#6 0x0021a5c2 in ssl_decode_switch (ssl=0x8c5f748, dtable=0x2493f8,
value=147147808, dir=2, seg=0xafc97ff0, data=0xafc97f30) at ssl/sslprint.c:251
#7 0x0021a747 in ssl_expand_record (ssl=0x8c5f748, q=0xafc97ff0, direction=2,
data=0x8c4cbe8 "\026\003\001", len=0) at ssl/sslprint.c:310
#8 0x00218b5a in print_ssl_record (obj=0x8c5f748, direction=2, q=0xafc97ff0,
data=0x8c4cbe8 "\026\003\001", len=47) at ssl/ssl_analyze.c:593
#9 0x002189ed in data_ssl_analyzer (_obj=0x8c5f748, seg=0xafc97ff0,
direction=2) at ssl/ssl_analyze.c:523
#10 0x0021d455 in process_data_segment (conn=0x8c62248, handler=0x249374,
ctx=0x8c09850, p=0xafc98090, stream=0x8c62290, direction=2) at
base/tcppack.c:431
#11 0x0021d092 in process_tcp_packet (handler=0x249374, ctx=0x8c09850,
reopenHandler=0x2493b4, reopenCtx=0x8e4880, p=0xafc98090, conn=0x8c62248,
direction=2)
at base/tcppack.c:203
#12 0x0021b0c3 in network_process_packet (handler=0x8c063b8,
reopenHandler=0x8a8dd50, timestamp=0x0, data=0x2493b4 "", length=0,
conn=0x8c62248, direction=2)
at base/network.c:187
#13 0x00217f45 in probeSslInterfaceReceivePacket (timestamp=0xafc98160,
handler=0x8c063b8, reopenHandler=0x8a8dd50, ipHeader=0x8c13258 "E",
ipTotalLength=1452,
data=0xafc99008 "HTTP/1.1 200 OK\r\nDate: Mon, 02 Nov 2009 16:51:32
GMT\r\nServer: IBM_HTTP_Server\r\nLast-Modified: Fri, 11 May 2001 12:39:50
GMT\r\nETag: \"3280bd-79-a9e21180\"\r\nAccept-Ranges: bytes\r\nContent-Length:
121\r\nCont"..., dataSize=147147808, connHandle=0x8c62248, direction=r2i,
connp=0x8c54c20, directionp=0x8c54c20)
at probeinterface/probesslinterface.c:281
#14 0x0017c18c in CPrConnManager::AnalyzePacketData (this=0x24a440,
thepack...@0x24a280, conn=0x8c35cf8) at ../protocolanalyzer/prpacket.h:159
#15 0x0017b5a3 in CPrConnManager::AnalyzeTcpPacket (this=0x24a440,
thepack...@0x24a280) at ../protocolanalyzer/prconnmanager.cpp:556
#16 0x00181a90 in CPrAdapterManager::AnalyzeEthernetPacket (this=0x24a3a0,
theBuf=0x8c1324a "", thetimesta...@0xafc98300, theCaptureSize=1466,
theDlcDataSize=1466,
tracePackets=0, monitorIpV4=true, monitorIpV6=true) at
../protocolanalyzer/pradaptermanager.cpp:435
#17 0x00183d90 in CPrAdapter::ReceivePacket (this=0x8a8c9e0, pktHdr=0xafc98300,
data=0x8c1324a "") at ../protocolanalyzer/pradaptermanager.cpp:976
#18 0x00183ceb in CPrAdapter::ReadCallback (userData=0x8a8c9e0 " £$",
pktHdr=0xafc98300, data=0x8c1324a "") at
../protocolanalyzer/pradaptermanager.cpp:954
#19 0x00bf14ae in ?? () from /usr/lib/libpcap.so.0.8.3
#20 0x08a8c9e0 in ?? ()
#21 0xafc98300 in ?? ()
#22 0x08c1324a in ?? ()
#23 0x00000020 in ?? ()
#24 0xafc98310 in ?? ()
#25 0xafc982fc in ?? ()
#26 0x00000000 in ?? ()
Current language: auto; currently c
(gdb)
[r...@rsl32xeoall01 tim]# LD_LIBRARY_PATH=lib gdb bin/tim
/home/vasu/core/core.6582
GNU gdb Red Hat Linux (6.3.0.0-1.132.EL4rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db
library "/lib/tls/libthread_db.so.1".
Core was generated by `/etc/wily/cem/tim/bin/tim -traceconnections
-tracessldebug'.
Program terminated with signal 11, Segmentation fault.
warning: .dynamic section for "/lib/libssl.so.4" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libpcap.so.0.8.3" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libpcre.so.0" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libexpat.so.0" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libm.so.6" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libgcc_s.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libc.so.6" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/i686/libdb-4.2.so" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libgssapi_krb5.so.2" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libkrb5.so.3" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libcom_err.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libk5crypto.so.3" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libresolv.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libcrypto.so.4" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libdl.so.2" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libz.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libpthread.so.0" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/ld-linux.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/librt.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libnsl.so.1" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
Reading symbols from /usr/local/wily/cem/tim/lib/libtimcommon.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimcommon.so
Reading symbols from /lib/libssl.so.4...done.
Loaded symbols for /lib/libssl.so.4
Reading symbols from /usr/lib/libpcap.so.0.8.3...done.
Loaded symbols for /usr/lib/libpcap.so.0.8.3
Reading symbols from /lib/libpcre.so.0...done.
Loaded symbols for /lib/libpcre.so.0
Reading symbols from /usr/lib/libexpat.so.0...done.
Loaded symbols for /usr/lib/libexpat.so.0
Reading symbols from /usr/lib/libnspr4.so...done.
Loaded symbols for /usr/lib/libnspr4.so
Reading symbols from /usr/lib/libplc4.so...done.
Loaded symbols for /usr/lib/libplc4.so
Reading symbols from /usr/local/wily/cem/tim/lib/libxerces-c.so.28...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libxerces-c.so.28
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/client/libjvm.so...done.
Loaded symbols for /etc/jdk/jre/lib/i386/client/libjvm.so
Reading symbols from /usr/local/wily/cem/tim/lib/libtimwebserver.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimwebserver.so
Reading symbols from /usr/local/wily/cem/tim/lib/libtimanalysis.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimanalysis.so
Reading symbols from /usr/lib/libstdc++.so.5...done.
Loaded symbols for /usr/lib/libstdc++.so.5
Reading symbols from /lib/tls/libm.so.6...done.
Loaded symbols for /lib/tls/libm.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /lib/tls/i686/libdb-4.2.so...done.
Loaded symbols for /lib/tls/i686/libdb-4.2.so
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/tls/libpthread.so.0...done.
Loaded symbols for /lib/tls/libpthread.so.0
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/tls/librt.so.1...done.
Loaded symbols for /lib/tls/librt.so.1
Reading symbols from
/opt/jdk1.6.0_12/jre/lib/i386/native_threads/libhpi.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/native_threads/libhpi.so
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libverify.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libverify.so
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libjava.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libjava.so
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libzip.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libzip.so
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
#0 0x00201bf5 in ssl_generate_keying_material (ssl=0x835f9a8, d=0x8318f08) at
ssl/ssldecode.c:844
844 ssl/ssldecode.c: No such file or directory.
in ssl/ssldecode.c
(gdb) where
#0 0x00201bf5 in ssl_generate_keying_material (ssl=0x835f9a8, d=0x8318f08) at
ssl/ssldecode.c:844
#1 0x002011b0 in ssl_restore_session (ssl=0x835f9a8, d=0x8318f08) at
ssl/ssldecode.c:458
#2 0x00200ed8 in ssl_process_server_session_id (ssl=0x835f9a8, d=0x8318f08,
msg=0x839239c "", len=0) at ssl/ssldecode.c:300
#3 0x00203d82 in decode_HandshakeType_ServerHello (ssl=0x835f9a8, dir=2,
seg=0xafa81ff0, data=0xafa81ea8) at ssl/ssl.enums.c:305
#4 0x002025c2 in ssl_decode_switch (ssl=0x835f9a8, dtable=0x231438,
value=137465608, dir=2, seg=0xafa81ff0, data=0xafa81ea8) at ssl/sslprint.c:251
#5 0x00203992 in decode_ContentType_Handshake (ssl=0x835f9a8, dir=2,
seg=0xafa81ff0, data=0xafa81f30) at ssl/ssl.enums.c:138
#6 0x002025c2 in ssl_decode_switch (ssl=0x835f9a8, dtable=0x2313f8,
value=137465608, dir=2, seg=0xafa81ff0, data=0xafa81f30) at ssl/sslprint.c:251
#7 0x00202747 in ssl_expand_record (ssl=0x835f9a8, q=0xafa81ff0, direction=2,
data=0x8392370 "\026\003\001", len=0) at ssl/sslprint.c:310
#8 0x00200b5a in print_ssl_record (obj=0x835f9a8, direction=2, q=0xafa81ff0,
data=0x8392370 "\026\003\001", len=47) at ssl/ssl_analyze.c:593
#9 0x002009ed in data_ssl_analyzer (_obj=0x835f9a8, seg=0xafa81ff0,
direction=2) at ssl/ssl_analyze.c:523
#10 0x00205455 in process_data_segment (conn=0x8326a58, handler=0x231374,
ctx=0x832a9b0, p=0xafa82090, stream=0x8326aa0, direction=2) at
base/tcppack.c:431
#11 0x00205092 in process_tcp_packet (handler=0x231374, ctx=0x832a9b0,
reopenHandler=0x2313b4, reopenCtx=0x8e4880, p=0xafa82090, conn=0x8326a58,
direction=2)
at base/tcppack.c:203
#12 0x002030c3 in network_process_packet (handler=0x8327518,
reopenHandler=0x81a4d50, timestamp=0x0, data=0x2313b4 "", length=0,
conn=0x8326a58, direction=2)
at base/network.c:187
#13 0x001fff45 in probeSslInterfaceReceivePacket (timestamp=0xafa82160,
handler=0x8327518, reopenHandler=0x81a4d50, ipHeader=0x832c1f8 "E",
ipTotalLength=1492,
data=0xafa83008
"ľ§±ým\233bøo¾\031_àö\005\to\026\023¬\027CD\237\234ö«\207\032CE\200Û¿§ïO[\030\205ÿ;\226o\a)ÖEnðY·ÞÂi\212hÔM\236Ys¥TÕ\223\226¶\035\030'a\nÒÇ·eZ,ëYI\032õ¨Âq¦ÿ¢\225³\206oöm9aßå¾<Îê#Ï2Q½uëØëG?\"§\a\211ÃSsE´\202Ã,Ä^\035ç¶\201¢mÜ\030&\022=\216³mÔÜÍY\034\tà!Ñ\023£Ë\037®W%no¯\234\t\v(Ñ\017fóH\037[½õ \206ìÓ.k9\023\004Ý[\202³UF5F¹\231\211\001þÖl"...,
dataSize=137465608, connHandle=0x8326a58, direction=r2i, connp=0x8318f08,
directionp=0x8318f08) at probeinterface/probesslinterface.c:281
#14 0x0016418c in CPrConnManager::AnalyzePacketData (this=0x232440,
thepack...@0x232280, conn=0x8352590) at ../protocolanalyzer/prpacket.h:159
#15 0x001635a3 in CPrConnManager::AnalyzeTcpPacket (this=0x232440,
thepack...@0x232280) at ../protocolanalyzer/prconnmanager.cpp:556
#16 0x00169a90 in CPrAdapterManager::AnalyzeEthernetPacket (this=0x2323a0,
theBuf=0x832c1ea "", thetimesta...@0xafa82300, theCaptureSize=1506,
theDlcDataSize=1506,
tracePackets=0, monitorIpV4=true, monitorIpV6=true) at
../protocolanalyzer/pradaptermanager.cpp:435
#17 0x0016bd90 in CPrAdapter::ReceivePacket (this=0x81a39e0, pktHdr=0xafa82300,
data=0x832c1ea "") at ../protocolanalyzer/pradaptermanager.cpp:976
#18 0x0016bceb in CPrAdapter::ReadCallback (userData=0x81a39e0 " ##",
pktHdr=0xafa82300, data=0x832c1ea "") at
../protocolanalyzer/pradaptermanager.cpp:954
#19 0x00bf14ae in ?? () from /usr/lib/libpcap.so.0.8.3
#20 0x081a39e0 in ?? ()
#21 0xafa82300 in ?? ()
#22 0x0832c1ea in ?? ()
#23 0x00000020 in ?? ()
#24 0xafa82310 in ?? ()
#25 0xafa822fc in ?? ()
#26 0x00000000 in ?? ()
Current language: auto; currently c
(gdb)
[r...@rsl32xeoall01 tim]# LD_LIBRARY_PATH=lib gdb bin/tim
/home/vasu/core/core.12193
GNU gdb Red Hat Linux (6.3.0.0-1.132.EL4rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db
library "/lib/tls/libthread_db.so.1".
Core was generated by `/etc/wily/cem/tim/bin/tim -traceconnections
-tracessldebug'.
Program terminated with signal 11, Segmentation fault.
warning: .dynamic section for "/etc/wily/cem/tim/bin/../lib/libtimcommon.so" is
not at the expected address
warning: .dynamic section for "/lib/libssl.so.4" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libpcap.so.0.8.3" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libpcre.so.0" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libexpat.so.0" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/etc/wily/cem/tim/bin/../lib/libtimanalysis.so"
is not at the expected address
warning: .dynamic section for "/lib/tls/libm.so.6" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libgcc_s.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libc.so.6" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/i686/libdb-4.2.so" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libgssapi_krb5.so.2" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libkrb5.so.3" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libcom_err.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libk5crypto.so.3" is not at the
expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libresolv.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libcrypto.so.4" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libdl.so.2" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/usr/lib/libz.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/libpthread.so.0" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/ld-linux.so.2" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/tls/librt.so.1" is not at the expected
address
warning: difference appears to be caused by prelink, adjusting expectations
warning: .dynamic section for "/lib/libnsl.so.1" is not at the expected address
warning: difference appears to be caused by prelink, adjusting expectations
Reading symbols from /usr/local/wily/cem/tim/lib/libtimcommon.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimcommon.so
Reading symbols from /lib/libssl.so.4...done.
Loaded symbols for /lib/libssl.so.4
Reading symbols from /usr/lib/libpcap.so.0.8.3...done.
Loaded symbols for /usr/lib/libpcap.so.0.8.3
Reading symbols from /lib/libpcre.so.0...done.
Loaded symbols for /lib/libpcre.so.0
Reading symbols from /usr/lib/libexpat.so.0...done.
Loaded symbols for /usr/lib/libexpat.so.0
Reading symbols from /usr/lib/libnspr4.so...done.
Loaded symbols for /usr/lib/libnspr4.so
Reading symbols from /usr/lib/libplc4.so...done.
Loaded symbols for /usr/lib/libplc4.so
Reading symbols from /usr/local/wily/cem/tim/lib/libxerces-c.so.28...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libxerces-c.so.28
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/client/libjvm.so...done.
Loaded symbols for /etc/jdk/jre/lib/i386/client/libjvm.so
Reading symbols from /usr/local/wily/cem/tim/lib/libtimwebserver.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimwebserver.so
Reading symbols from /usr/local/wily/cem/tim/lib/libtimanalysis.so...done.
Loaded symbols for /etc/wily/cem/tim/bin/../lib/libtimanalysis.so
Reading symbols from /usr/lib/libstdc++.so.5...done.
Loaded symbols for /usr/lib/libstdc++.so.5
Reading symbols from /lib/tls/libm.so.6...done.
Loaded symbols for /lib/tls/libm.so.6
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /lib/tls/i686/libdb-4.2.so...done.
Loaded symbols for /lib/tls/i686/libdb-4.2.so
Reading symbols from /usr/lib/libgssapi_krb5.so.2...done.
Loaded symbols for /usr/lib/libgssapi_krb5.so.2
Reading symbols from /usr/lib/libkrb5.so.3...done.
Loaded symbols for /usr/lib/libkrb5.so.3
Reading symbols from /lib/libcom_err.so.2...done.
Loaded symbols for /lib/libcom_err.so.2
Reading symbols from /usr/lib/libk5crypto.so.3...done.
Loaded symbols for /usr/lib/libk5crypto.so.3
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libcrypto.so.4...done.
Loaded symbols for /lib/libcrypto.so.4
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/tls/libpthread.so.0...done.
Loaded symbols for /lib/tls/libpthread.so.0
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/tls/librt.so.1...done.
Loaded symbols for /lib/tls/librt.so.1
Reading symbols from
/opt/jdk1.6.0_12/jre/lib/i386/native_threads/libhpi.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/native_threads/libhpi.so
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libverify.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libverify.so
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libjava.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libjava.so
Reading symbols from /opt/jdk1.6.0_12/jre/lib/i386/libzip.so...done.
Loaded symbols for /opt/jdk1.6.0_12/jre/lib/i386/libzip.so
#0 0x00344919 in ssl3_prf (ssl=0xa139380, secret=0xa13ade0, usage=0x30 "",
r1=0x944fda0, r2=0xa13ae98, out=0xa1636e8) at ssl/ssldecode.c:757
757 ssl/ssldecode.c: No such file or directory.
in ssl/ssldecode.c
(gdb) where
#0 0x00344919 in ssl3_prf (ssl=0xa139380, secret=0xa13ade0, usage=0x30 "",
r1=0x944fda0, r2=0xa13ae98, out=0xa1636e8) at ssl/ssldecode.c:757
#1 0x00343ed4 in ssl_process_server_session_id (ssl=0xa139380, d=0x18, msg=0x2
"", len=3423159) at ssl/ssldecode.c:300
#2 0x00343bfc in ssl_decode_ctx_create (dp=0xa13ade0, keyfile=0xa13ade0
"@j\024\n\230\226\023\n", pass=0x944fea8 "\206B\026\n\001") at
ssl/ssldecode.c:144
#3 0x00346aa6 in decode_HandshakeType_ClientHello (ssl=0xa139380, dir=2,
seg=0x944fff0, data=0x944fea8) at ssl/ssl.enums.c:231
#4 0x003452e6 in process_v2_hello (ssl=0x374138, seg=0xa139380) at
ssl/sslprint.c:140
#5 0x003466b6 in r_data_copy (dst=0x944ff30, src=0xa139380) at
common/lib/r_data.c:137
#6 0x003452e6 in process_v2_hello (ssl=0x3740f8, seg=0xa139380) at
ssl/sslprint.c:140
#7 0x0034546b in process_v2_hello (ssl=0xa139380, seg=0xa164258) at
ssl/sslprint.c:193
#8 0x0034387e in read_data (q=0xa139380, seg=0x2f, offset=155516912,
lastp=0xa164258, offsetp=0x2f) at ssl/ssl_analyze.c:428
#9 0x00343711 in read_ssl_record (obj=0xa139380, q=0xa12d420, seg=0x0,
offset=3440295, lastp=0xa13ade0, offsetp=0xa13ade0) at ssl/ssl_analyze.c:369
#10 0x00348179 in process_data_segment (conn=0xa127f28, handler=0x374074,
ctx=0xa146a40, p=0x9450090, stream=0xa127f70, direction=2) at base/tcppack.c:276
#11 0x00347db6 in process_tcp_packet (handler=0x374074, ctx=0xa146a40,
reopenHandler=0x3740b4, reopenCtx=0x8e4880, p=0xa127f70, conn=0xa127f28,
direction=168984360)
at base/tcppack.c:116
#12 0x00345de7 in copy_tcp_segment_queue (out=0x374074, in=0x3740b4) at
base/tcpconn.c:173
#13 0x00342c69 in probeSslInterfaceSetGetTraceSslDebugFlagFunc (func=0) at
probeinterface/probesslinterface.c:103
#14 0x002a7148 in CPrConnManager::AnalyzePacketData (this=0x375140,
thepack...@0x374f80, conn=0xa1285a0) at
../protocolanalyzer/prconnmanager.cpp:910
#15 0x002a655f in CPrConnManager::AnalyzeTcpPacket (this=0x375140,
thepack...@0x374f80) at ../protocolanalyzer/prpacket.h:187
#16 0x002aca4c in CPrAdapterManager::AnalyzeEthernetPacket (this=0x3750a0,
theBuf=0xa14827a "", thetimesta...@0x9450300, theCaptureSize=1506,
theDlcDataSize=1506,
tracePackets=0, monitorIpV4=true, monitorIpV6=true) at
../../../src/tim/common/prclientfilter.h:132
#17 0x002aed4c in CPrAdapter::ReceivePacket (this=0x9fbf9e0, pktHdr=0x9450300,
data=0xa14827a "") at ../protocolanalyzer/pradaptermanager.cpp:968
#18 0x002aeca7 in CPrAdapter::MainLoop (this=0x5e2) at
../protocolanalyzer/pradaptermanager.cpp:937
#19 0x00bf14ae in ?? () from /usr/lib/libpcap.so.0.8.3
#20 0x09fbf9e0 in ?? ()
#21 0x09450300 in ?? ()
#22 0x0a14827a in ?? ()
#23 0x00000020 in ?? ()
#24 0x09450310 in ?? ()
#25 0x094502fc in ?? ()
#26 0x00000000 in ?? ()
Current language: auto; currently c
(gdb)
