On Wed, Jun 24, 2009 at 12:39:58AM +0200, Bernhard Schmidt wrote: Hi, > Oh, and we're dumping conntrack -L every minute. Works fine during the > day with 30k connections, but starts to frequently segfault with 60k > connections in the evening. Also trying to get a coredump now. sorry, this is slightly off-topic, but I can't decode the core dump :-( Jun 24 12:03:01 secomat2 kernel: conntrack[14117]: segfault at 7fff1ce83f34 ip 00007fff1ce83f34 sp 00007fff1ce82f20 error 15 secomat2:~ # gdb /usr/local/sbin/conntrack /root/core.14117 GNU gdb (GDB; SUSE Linux Enterprise 11) 6.8.50.20081120-cvs Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-suse-linux". For bug reporting instructions, please see: <http://bugs.opensuse.org/>... warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/local/lib/libnetfilter_conntrack.so.1...done. Loaded symbols for /usr/local/lib/libnetfilter_conntrack.so.1 Reading symbols from /usr/local/lib/libnfnetlink.so.0...done. Loaded symbols for /usr/local/lib/libnfnetlink.so.0 Reading symbols from /lib64/libc.so.6...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/libdl.so.2...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Core was generated by `/usr/local/sbin/conntrack -L conntrack'. Program terminated with signal 11, Segmentation fault. #0 0x00007fff1ce83f34 in ?? () (gdb) bt #0 0x00007fff1ce83f34 in ?? () #1 0x00007fff1ce83f3c in ?? () #2 0x00007fff1ce83f44 in ?? () #3 0x0000000000000000 in ?? () (gdb) secomat2:~ # file /usr/local/sbin/conntrack /usr/local/sbin/conntrack: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), for GNU/Linux 2.6.4, dynamically linked (uses shared libs), not stripped what am I missing to get a backtrace you can work with? Both libnfnetlink and conntrack-tools are built with CFLAGS="-g -O0". Thanks, Bernhard -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
