Subject: Re: Snort in Potato and unaligned traps...
From: Christopher C. Chimelis (chris@debian.org)
Date: Fri May 18 2001 - 06:28:06 PDT
On Fri, 18 May 2001, Gary McKinney wrote:
> I know you do a great deal to further the Debian cause on the Alpha
> platforms and have techniques you utilize to correct this type of a problem
> (unaligned traps).
It's actually easier now that it used to be...we have a binary that will
fire up gdb when an unaligned access occurs and puts us right at the spot
in question.
I'm attaching the source for it, so enjoy it :-)
All you need to do, once it's compiled, is type:
unaligned <binary>
Where <binary> is the name of the programme that's showing unaligned
traps. I highly recommend doing this on unstripped programmes, though,
since otherwise, you may not be able to easily correlate where you are
when in gdb with the source code.
> "features" <grin>... One of the reasons for the question is Snort in Potato
> currently has such a "feature" and is also at least 2 revisions behind the
> current version of Snort... I would like to clean it up (reduce the
> /var/log/messages file size to relevant information). I know you and the
> rest of the list have other more pressing issues to deal with and this would
> give me more insight into the alpha.
I looked at snort awhile ago, but didn't have the conditions to reproduce
the unaligned access (it used to happen only if you had a ppp
connection...I only have ethernets on this box, so I didn't see the
trap messages). I think this behaviour has changed, though, so it would
probably be a good thing to go over again with 'unaligned' to see where
the problems are now.
> Oh - btw: The last time I had sent an email to you it was about the Seti
> program not working on my system and you (and a few others) suggested using
> a different method - well - I did it a different way than that... I
> downloaded the latest version for Linux-alpha and just used the -nolock flag
> and the software was happy (just have to watch out and not try to run
> multiple sessions in the same directory <grin>).... worked out fine that way
> (and kept it running in a pure Debian environment too)...
Glad that we could help :-)
C
This archive was generated by hypermail 2a22 : Fri Jun 01 2001 - 04:36:15 PDT