Filterlog core dump

pLu

2.3 RC:

pid 16031 (filterlog), uid 0: exited on signal 11 (core dumped)
pflog0: promiscuous mode disabled

I've seen it since at least 2.2.4 so it's about time to find that bug. Where can I find a debug build of filterlog (amd64)?

cmb

There is no debug version. It should be leaving a core file somewhere.

find / -name '*.core'

Your raw filter log contents may have a clue. You see anything in 'clog /var/log/filter.log' that correlates with the time of the crash?

pLu

The core file is conveniently placed in the root. I've also saved cores from 2.2.4 and 2.2.5.

filterlog was at some point restarted so any possible hints are long gone. There's only about four minutes of traffic in the log.

(gdb) bt
#0 0x0000000000402c00 in ?? ()
#1 0x00000000004034e8 in ?? ()
#2 0x0000000800a54394 in pcap_platform_finddevs () from /lib/libpcap.so.8
#3 0x0000000800a51752 in pcap_loop () from /lib/libpcap.so.8
#4 0x00000000004031f7 in ?? ()
#5 0x00000000004011af in ?? ()
#6 0x0000000800626000 in ?? ()
#7 0x0000000000000000 in ?? ()

I need a binary that's built with -g and not stripped of symbols to get any useful hint.

pLu

https://redmine.pfsense.org/issues/6109