ysrc / yulong-hids-archived

[archived] 一款实验性质的主机入侵检测系统
Other
2.15k stars 583 forks source link

v0.4.3 BETA 出现server异常崩溃,已经有2次了。 #10

Open JohnnyTTzhu opened 6 years ago

JohnnyTTzhu commented 6 years ago

bufio.(Reader).Read(0xc42021b620, 0xc42032a6c0, 0xc, 0xc, 0x60, 0x60, 0x994020) /usr/local/go/src/bufio/bufio.go:216 +0x238 io.ReadAtLeast(0xa09080, 0xc42021b620, 0xc42032a6c0, 0xc, 0xc, 0xc, 0x2, 0xc420020a00, 0x2) /usr/local/go/src/io/io.go:309 +0x86 io.ReadFull(0xa09080, 0xc42021b620, 0xc42032a6c0, 0xc, 0xc, 0x813f53, 0x994020, 0xc420206660) /usr/local/go/src/io/io.go:327 +0x58 yulong-hids/server/vendor/github.com/smallnest/rpcx/protocol.(Message).Decode(0xc420206660, 0xa09080, 0xc42021b620, 0x0, 0x0) /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/protocol/message.go:359 +0x71 yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(Server).readRequest(0xc4200f0420, 0xa0d780, 0xc4201cf200, 0xa09080, 0xc42021b620, 0xa0d780, 0xc4201cf200, 0xc4200f0420) /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/server.go:335 +0x7f yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(Server).serveConn(0xc4200f0420, 0xa0eac0, 0xc42055a700) /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/server.go:258 +0x248 created by yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(*Server).serveListener /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/server.go:189 +0x1de

goroutine 37239 [select]: net/http.(persistConn).writeLoop(0xc4204930e0) /usr/local/go/src/net/http/transport.go:1822 +0x14b created by net/http.(Transport).dialConn /usr/local/go/src/net/http/transport.go:1238 +0x97f

goroutine 37238 [IO wait]: internal/poll.runtime_pollWait(0x7f32e32707b0, 0x72, 0xc42052f9a8) /usr/local/go/src/runtime/netpoll.go:173 +0x57 internal/poll.(pollDesc).wait(0xc4200ced98, 0x72, 0xffffffffffffff00, 0xa0a640, 0xc965d8) /usr/local/go/src/internal/poll/fd_poll_runtime.go:85 +0x9b internal/poll.(pollDesc).waitRead(0xc4200ced98, 0xc4203a6000, 0x1000, 0x1000) /usr/local/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d internal/poll.(FD).Read(0xc4200ced80, 0xc4203a6000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:157 +0x17d net.(netFD).Read(0xc4200ced80, 0xc4203a6000, 0x1000, 0x1000, 0x453530, 0xc420399b00, 0x4) /usr/local/go/src/net/fd_unix.go:202 +0x4f net.(conn).Read(0xc42009c158, 0xc4203a6000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /usr/local/go/src/net/net.go:176 +0x6a net/http.(persistConn).Read(0xc4204930e0, 0xc4203a6000, 0x1000, 0x1000, 0xc42052fb98, 0x404fa5, 0xc42019e600) /usr/local/go/src/net/http/transport.go:1453 +0x136 bufio.(Reader).fill(0xc4205864e0) /usr/local/go/src/bufio/bufio.go:100 +0x11e bufio.(Reader).Peek(0xc4205864e0, 0x1, 0x0, 0x0, 0x1, 0xc42007c120, 0x0) /usr/local/go/src/bufio/bufio.go:132 +0x3a net/http.(persistConn).readLoop(0xc4204930e0) /usr/local/go/src/net/http/transport.go:1601 +0x185 created by net/http.(Transport).dialConn /usr/local/go/src/net/http/transport.go:1237 +0x95a

goroutine 37597 [runnable]: yulong-hids/server/action.ResultStat(0xc4202e3070, 0xe, 0xc4202e3084, 0xa, 0xc4202e3096, 0x5, 0xc42000e068, 0x1, 0x1, 0xbea93c80fb68c6e4, ...) /home/neargle/gopath/src/yulong-hids/server/action/statistics.go:34 +0x564 main.(Watcher).PutInfo(0xc420099a60, 0xa0d780, 0xc4201ce420, 0xc4202b5260, 0xc4202e30d8, 0x0, 0x0) /home/neargle/gopath/src/yulong-hids/server/server.go:44 +0x1c9 reflect.Value.call(0xc4200ce800, 0xc42009c260, 0x13, 0x9af758, 0x4, 0xc4204c9c50, 0x4, 0x4, 0xc4202b0040, 0x92e760, ...) /usr/local/go/src/reflect/value.go:447 +0x969 reflect.Value.Call(0xc4200ce800, 0xc42009c260, 0x13, 0xc4204c9c50, 0x4, 0x4, 0x8b2101, 0x8b21e0, 0xc4202e30d8) /usr/local/go/src/reflect/value.go:308 +0xa4 yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(service).call(0xc42009ec80, 0xa0d780, 0xc4201ce420, 0xc4200ce880, 0x8bc2e0, 0xc4202b5260, 0x16, 0x8b21e0, 0xc4202e30d8, 0x16, ...) /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/service.go:315 +0x1b5 yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(Server).handleRequest(0xc4200f0420, 0xa0d780, 0xc4201ce420, 0xc4202f50e0, 0x903420, 0xc4201ce3c0, 0xa0d780) /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/server.go:387 +0x3b0 yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(Server).serveConn.func2(0xc4202f50e0, 0xa0eac0, 0xc4200d4a80, 0xa0d780, 0xc4205cf290, 0xc4200f0420) /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/server.go:302 +0x17e created by yulong-hids/server/vendor/github.com/smallnest/rpcx/server.(*Server).serveConn /home/neargle/gopath/src/yulong-hids/server/vendor/github.com/smallnest/rpcx/server/server.go:290 +0x4f4

ihacku commented 6 years ago

@neargle 这个是因为之前测试的老版本的agent跟server之间的兼容性问题不?

neargle commented 6 years ago

@ihacku 这个问题我和他讨论过,报错确实是和 rpcx 的兼容类似,但是题主保证了 agent 都是最新的。 我遇到有两种情况会出现这个问题:

不知道题主是否使用了es集群?

JohnnyTTzhu commented 6 years ago

@neargle 这次信息量不大,agent保证全部都是最新的,还是没有采用集群,而且只控制在了7台client上。以前从来没遇见过,就这次的v0.4.3版本开始的,server无缘无故的崩溃。

neargle commented 6 years ago

这个需要wolf判断一下。 @ywolf