We're having some issues using nfacctd with IMT.. After running for
~6-8 hours ingesting flow data, we see segfaults and the pmacct client
ceases to function properly returning:

"ERROR: missing EOF from server"

Querying pmacct client every 2 minutes with:

pmacct -p nfacctd-dst.pipe -O json -a -c "tag2" -M "2;3" -T "packets,1000"

If that returns data, we then:

pmacct -p nfacctd-dst.pipe -e

Associated segfault from nfacctd daemon:

Jun 20 10:32:02 kernel: nfacctd[21874]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 10:36:02 kernel: nfacctd[21930]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 10:40:02 kernel: nfacctd[21983]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 10:46:02 kernel: nfacctd[22068]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 10:54:02 kernel: nfacctd[22188]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 11:02:02 kernel: nfacctd[22350]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 11:04:02 kernel: nfacctd[22374]: segfault at 21 ip
000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]
Jun 20 11:32:02 kernel: nfacctd[22903]: segfault at 4d8e6600 ip
0000000000476103 sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000]

nfacctd Config:

!daemonize: true
nfacctd_port: 5680
plugins: memory[full], memory[dst]

aggregate[full]: tag, tag2, in_iface, out_iface, src_as, dst_as,
src_host, dst_host, proto, src_port, dst_port, tcpflags, ext_comm,
src_ext_comm
aggregate[dst]: tag, tag2, in_iface, dst_as, dst_host

imt_path[full]: /tmp/nfacctd-full.pipe
imt_path[dst]: /tmp/nfacctd-dst.pipe

pre_tag_map: /opt/pmacct/etc/pretag.map

nfacctd_time_new: true
nfacctd_renormalize: true

plugin_pipe_size: 131072000
plugin_buffer_size: 6400
imt_buckets: 65537
imt_mem_pools_size: 1024000

I'm working on capturing the debug output from nfacctd when this
segfault happens, but is there anything else I should capture to help
figure out why this is happening?

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to