Segmentation Fault Processing Diameter Packets

[wayne-genie]

Overview: In recent nProbe builds, one process dealing with Diameter traffic experiences segmentation fault right after it initiates.

Actual Result: 16/Feb/2016 18:04:33 [nprobe.c:3199] Valid nProbe Pro license found 16/Feb/2016 18:04:33 [plugin.c:169] No plugins found in ./plugins 16/Feb/2016 18:04:33 [plugin.c:177] Loading 22 plugins [.so] from /usr/local/lib/nprobe/plugins 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin DHCP Protocol: missing license [/etc/nprobe.license.dhcp] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin Export Plugin: missing license [/etc/nprobe.license.export] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin FTP Protocol: missing license [/etc/nprobe.license.ftp] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin IMAP Protocol: missing license [/etc/nprobe.license.email] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin Oracle Protocol: missing license [/etc/nprobe.license.oracle] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin POP3 Protocol: missing license [/etc/nprobe.license.email] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin S1AP Protocol: missing license [/etc/nprobe.license.S1AP] 16/Feb/2016 18:04:33 [plugin.c:750] Unable to enable plugin SMTP Protocol: missing license [/etc/nprobe.license.email] 16/Feb/2016 18:04:33 [nprobe.c:3642] WARNING: Ignored -c: it must be specified after -L 16/Feb/2016 18:04:33 [nprobe.c:3781] WARNING: Sorry: the -p parameter has an invalid format 16/Feb/2016 18:04:33 [nprobe.c:4550] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ? 16/Feb/2016 18:04:33 [nprobe.c:4647] Welcome to nProbe Pro v.7.3.160216 ($Revision: 4839 $) for x86_64-unknown-linux-gnu with native PF_RING acceleration 16/Feb/2016 18:04:33 [nprobe.c:4657] Running on Ubuntu 14.04.3 LTS 16/Feb/2016 18:04:33 [nprobe.c:4668] [LICENSE] nProbe SystemId: A194887A9105A1EF 16/Feb/2016 18:04:33 [nprobe.c:4679] [LICENSE] nProbe License: 0453A945C52766B8D1A7286B3EBDCD9E14628610128FB9EE34 16/Feb/2016 18:04:33 [nprobe.c:4682] [LICENSE] nProbe Edition: Professional with PF_RING Acceleration 16/Feb/2016 18:04:33 [nprobe.c:4712] [LICENSE] Maintenance is available until Tue May 10 14:16:52 2016 [83 days left] 16/Feb/2016 18:04:33 [nprobe.c:6664] Welcome to nProbe v.7.3.160216 for x86_64-unknown-linux-gnu 16/Feb/2016 18:04:33 [nprobe.c:5922] Using NetFlow Packet Payload Len: 1472 16/Feb/2016 18:04:33 [plugin.c:1009] 1 plugin(s) enabled 16/Feb/2016 18:04:33 [nprobe.c:6319] Each flow is 290 bytes long 16/Feb/2016 18:04:33 [nprobe.c:6320] The # packets per flow has been set to 4 16/Feb/2016 18:04:33 [nprobe.c:6339] Non IPv4/v6 traffic is discarded according to the template 16/Feb/2016 18:04:33 [util.c:431] GeoIP: loaded AS config file /usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat 16/Feb/2016 18:04:33 [util.c:442] GeoIP: loaded AS IPv6 config file /usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat 16/Feb/2016 18:04:33 [nprobe.c:5211] Using packet capture length 1600 16/Feb/2016 18:04:33 [plugin.c:825] Enabling plugin Diameter Protocol Segmentation fault (core dumped)

Expected Result: No segmentation fault and the process is up fine

Build Date & Hardware: nProbe v.7.3.160216 (r4839) on Ubuntu 14.04.3 LTS

nProbe Command used: /usr/local/bin/nprobe -n 192.168.10.198:9145 -i TEST.pcap -u 4 -Q 0 -d 5 -t 10 -V 9 -o 100 -U 600 -cpu-affinity 2 --export-thread-affinity 7 --dump-bad-packets /home/genie/probe_log/bad-pkt-eth2.pcap --event-log /home/genie/nprobe-event-eth2.log --bi-directional -T "%FIRST_SWITCHED %LAST_SWITCHED %IN_PKTS %IN_BYTES %IPV4_SRC_ADDR %IPV4_DST_ADDR %INPUT_SNMP %OUTPUT_SNMP %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS \ %BIFLOW_DIRECTION \ %L7_PROTO %APPLICATION_ID \ %SRC_VLAN %DST_VLAN \ %DIAMETER_REQ_MSG_TYPE %DIAMETER_RSP_MSG_TYPE %DIAMETER_REQ_ORIGIN_HOST %DIAMETER_RSP_ORIGIN_HOST %DIAMETER_REQ_USER_NAME %DIAMETER_RSP_RESULT_CODE %DIAMETER_EXP_RES_VENDOR_ID %DIAMETER_EXP_RES_RESULT_CODE %DIAMETER_HOP_BY_HOP_ID \ "

[ValentinaViscarelli]

Do you have a pcap file to reproduce the problem? Thanks

[wayne-genie]

TEST.pcap.zip Hi please use the attached pcap to reproduce the issue. I tried with v.7.3.160216 (r4839) and seg fault still occurs. Thank you!

[ValentinaViscarelli]

Fixed.