[pmacct-discussion] buffer overflow / backtrace on 1.5rc1
I get a pretty repeatable buffer overflow when trying to use nfacctd with BGP enabled. (threaded) It will run for a few moments and then bombs out. *** buffer overflow detected ***: nfacctd: Core Process [default] terminated === Backtrace: = /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f56d4dd1f47] /lib/x86_64-linux-gnu/libc.so.6(+0x109e40)[0x7f56d4dd0e40] nfacctd: Core Process [default](bgp_nlri_parse+0x15f)[0x46b17f] nfacctd: Core Process [default](bgp_update_msg+0x3a7)[0x46bb87] nfacctd: Core Process [default](skinny_bgp_daemon+0xc1f)[0x46e84f] nfacctd: Core Process [default](thread_runner+0x5b)[0x45f72b] /lib/x86_64-linux-gnu/libpthread.so.0(+0x7e9a)[0x7f56d508ee9a] /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f56d4dbb3fd] === Memory map: 0040-004ca000 r-xp fd:01 270072 /opt/pmacct/sbin/nfacctd 006c9000-006ca000 r--p 000c9000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006ca000-006cb000 rw-p 000ca000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006cb000-0074c000 rw-p 00:00 0 00ab9000-00ada000 rw-p 00:00 0 [heap] 7f56c400-7f56c6e8c000 rw-p 00:00 0 7f56c6e8c000-7f56c800 ---p 00:00 0 7f56cbde2000-7f56cbdf7000 r-xp fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbdf7000-7f56cbff6000 ---p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff6000-7f56cbff7000 r--p 00014000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff7000-7f56cbff8000 rw-p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbfff000-7f56cc00 rw-p 00:00 0 7f56cc00-7f56d000 rw-p 00:00 0 7f56d3a0-7f56d3fb3000 rw-s 00:04 10398639 /dev/zero (deleted) 7f56d3fb3000-7f56d3fb4000 ---p 00:00 0 7f56d3fb4000-7f56d47b4000 rw-p 00:00 0 7f56d47b4000-7f56d48af000 r-xp fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d48af000-7f56d4aae000 ---p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aae000-7f56d4aaf000 r--p 000fa000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aaf000-7f56d4ab rw-p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4ab-7f56d4ac6000 r-xp fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4ac6000-7f56d4cc5000 ---p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc5000-7f56d4cc6000 r--p 00015000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc6000-7f56d4cc7000 rw-p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc7000-7f56d4e7c000 r-xp fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d4e7c000-7f56d507c000 ---p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d507c000-7f56d508 r--p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d508-7f56d5082000 rw-p 001b9000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d5082000-7f56d5087000 rw-p 00:00 0 7f56d5087000-7f56d509f000 r-xp fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d509f000-7f56d529e000 ---p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529e000-7f56d529f000 r--p 00017000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529f000-7f56d52a rw-p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d52a-7f56d52a4000 rw-p 00:00 0 7f56d52a4000-7f56d52a6000 r-xp fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d52a6000-7f56d54a6000 ---p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a6000-7f56d54a7000 r--p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a7000-7f56d54a8000 rw-p 3000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a8000-7f56d54db000 r-xp fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d54db000-7f56d56da000 ---p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56da000-7f56d56db000 r--p 00032000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56db000-7f56d56dd000 rw-p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56dd000-7f56d5711000 r-xp fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5711000-7f56d5911000 ---p 00034000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5911000-7f56d5912000 r--p 00034000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5912000-7f56d5913000 rw-p 00035000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5913000-7f56d5914000 rw-p 00:00 0 7f56d5914000-7f56d5bd2000 r-xp fd:01 130807 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0 7f56d5bd2000-7f56d5dd1000 ---p 002be000 fd:01 130807 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0 7f56d5dd1000-7f56d5dd7000 r--p 002bd000 fd:01 130807 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0 7f56d5dd7000-7f56d5e55000 rw-p 002c3000 fd:01 130807 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0 7f56d5e55000-7f56d5e5a000 rw-p 00:00 0 7f56d5e5a000-7f56d5e7c000 r-xp fd:01 394153
Re: [pmacct-discussion] buffer overflow / backtrace on 1.5rc1
FWIW: I get the same on nfacctd 0.14.3 (20130503-00) On Wed, Dec 4, 2013 at 4:18 PM, Joel Krauska j...@krauska.net wrote: I get a pretty repeatable buffer overflow when trying to use nfacctd with BGP enabled. (threaded) It will run for a few moments and then bombs out. *** buffer overflow detected ***: nfacctd: Core Process [default] terminated === Backtrace: = /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f56d4dd1f47] /lib/x86_64-linux-gnu/libc.so.6(+0x109e40)[0x7f56d4dd0e40] nfacctd: Core Process [default](bgp_nlri_parse+0x15f)[0x46b17f] nfacctd: Core Process [default](bgp_update_msg+0x3a7)[0x46bb87] nfacctd: Core Process [default](skinny_bgp_daemon+0xc1f)[0x46e84f] nfacctd: Core Process [default](thread_runner+0x5b)[0x45f72b] /lib/x86_64-linux-gnu/libpthread.so.0(+0x7e9a)[0x7f56d508ee9a] /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f56d4dbb3fd] === Memory map: 0040-004ca000 r-xp fd:01 270072 /opt/pmacct/sbin/nfacctd 006c9000-006ca000 r--p 000c9000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006ca000-006cb000 rw-p 000ca000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006cb000-0074c000 rw-p 00:00 0 00ab9000-00ada000 rw-p 00:00 0 [heap] 7f56c400-7f56c6e8c000 rw-p 00:00 0 7f56c6e8c000-7f56c800 ---p 00:00 0 7f56cbde2000-7f56cbdf7000 r-xp fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbdf7000-7f56cbff6000 ---p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff6000-7f56cbff7000 r--p 00014000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff7000-7f56cbff8000 rw-p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbfff000-7f56cc00 rw-p 00:00 0 7f56cc00-7f56d000 rw-p 00:00 0 7f56d3a0-7f56d3fb3000 rw-s 00:04 10398639 /dev/zero (deleted) 7f56d3fb3000-7f56d3fb4000 ---p 00:00 0 7f56d3fb4000-7f56d47b4000 rw-p 00:00 0 7f56d47b4000-7f56d48af000 r-xp fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d48af000-7f56d4aae000 ---p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aae000-7f56d4aaf000 r--p 000fa000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aaf000-7f56d4ab rw-p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4ab-7f56d4ac6000 r-xp fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4ac6000-7f56d4cc5000 ---p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc5000-7f56d4cc6000 r--p 00015000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc6000-7f56d4cc7000 rw-p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc7000-7f56d4e7c000 r-xp fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d4e7c000-7f56d507c000 ---p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d507c000-7f56d508 r--p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d508-7f56d5082000 rw-p 001b9000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d5082000-7f56d5087000 rw-p 00:00 0 7f56d5087000-7f56d509f000 r-xp fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d509f000-7f56d529e000 ---p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529e000-7f56d529f000 r--p 00017000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529f000-7f56d52a rw-p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d52a-7f56d52a4000 rw-p 00:00 0 7f56d52a4000-7f56d52a6000 r-xp fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d52a6000-7f56d54a6000 ---p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a6000-7f56d54a7000 r--p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a7000-7f56d54a8000 rw-p 3000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a8000-7f56d54db000 r-xp fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d54db000-7f56d56da000 ---p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56da000-7f56d56db000 r--p 00032000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56db000-7f56d56dd000 rw-p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56dd000-7f56d5711000 r-xp fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5711000-7f56d5911000 ---p 00034000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5911000-7f56d5912000 r--p 00034000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5912000-7f56d5913000 rw-p 00035000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5913000-7f56d5914000 rw-p 00:00 0 7f56d5914000-7f56d5bd2000 r-xp fd:01 130807 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0 7f56d5bd2000-7f56d5dd1000 ---p 002be000 fd:01 130807 /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18.0.0 7f56d5dd1000-7f56d5dd7000 r--p 002bd000 fd:01 130807
Re: [pmacct-discussion] buffer overflow / backtrace on 1.5rc1
Hi Joel, Wow, interesting. What OS are you running? What BGP capabilities are enabled and which address families are you sending over? It would help if you can run the daemon under gdb and collect 'bt' information (send it directly to me). Post in the same email also your config. We can take it from there. Cheers, Paolo On Wed, Dec 04, 2013 at 04:18:42PM -0800, Joel Krauska wrote: I get a pretty repeatable buffer overflow when trying to use nfacctd with BGP enabled. (threaded) It will run for a few moments and then bombs out. *** buffer overflow detected ***: nfacctd: Core Process [default] terminated === Backtrace: = /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f56d4dd1f47] /lib/x86_64-linux-gnu/libc.so.6(+0x109e40)[0x7f56d4dd0e40] nfacctd: Core Process [default](bgp_nlri_parse+0x15f)[0x46b17f] nfacctd: Core Process [default](bgp_update_msg+0x3a7)[0x46bb87] nfacctd: Core Process [default](skinny_bgp_daemon+0xc1f)[0x46e84f] nfacctd: Core Process [default](thread_runner+0x5b)[0x45f72b] /lib/x86_64-linux-gnu/libpthread.so.0(+0x7e9a)[0x7f56d508ee9a] /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f56d4dbb3fd] === Memory map: 0040-004ca000 r-xp fd:01 270072 /opt/pmacct/sbin/nfacctd 006c9000-006ca000 r--p 000c9000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006ca000-006cb000 rw-p 000ca000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006cb000-0074c000 rw-p 00:00 0 00ab9000-00ada000 rw-p 00:00 0 [heap] 7f56c400-7f56c6e8c000 rw-p 00:00 0 7f56c6e8c000-7f56c800 ---p 00:00 0 7f56cbde2000-7f56cbdf7000 r-xp fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbdf7000-7f56cbff6000 ---p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff6000-7f56cbff7000 r--p 00014000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff7000-7f56cbff8000 rw-p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbfff000-7f56cc00 rw-p 00:00 0 7f56cc00-7f56d000 rw-p 00:00 0 7f56d3a0-7f56d3fb3000 rw-s 00:04 10398639 /dev/zero (deleted) 7f56d3fb3000-7f56d3fb4000 ---p 00:00 0 7f56d3fb4000-7f56d47b4000 rw-p 00:00 0 7f56d47b4000-7f56d48af000 r-xp fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d48af000-7f56d4aae000 ---p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aae000-7f56d4aaf000 r--p 000fa000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aaf000-7f56d4ab rw-p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4ab-7f56d4ac6000 r-xp fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4ac6000-7f56d4cc5000 ---p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc5000-7f56d4cc6000 r--p 00015000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc6000-7f56d4cc7000 rw-p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc7000-7f56d4e7c000 r-xp fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d4e7c000-7f56d507c000 ---p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d507c000-7f56d508 r--p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d508-7f56d5082000 rw-p 001b9000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d5082000-7f56d5087000 rw-p 00:00 0 7f56d5087000-7f56d509f000 r-xp fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d509f000-7f56d529e000 ---p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529e000-7f56d529f000 r--p 00017000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529f000-7f56d52a rw-p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d52a-7f56d52a4000 rw-p 00:00 0 7f56d52a4000-7f56d52a6000 r-xp fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d52a6000-7f56d54a6000 ---p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a6000-7f56d54a7000 r--p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a7000-7f56d54a8000 rw-p 3000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a8000-7f56d54db000 r-xp fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d54db000-7f56d56da000 ---p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56da000-7f56d56db000 r--p 00032000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56db000-7f56d56dd000 rw-p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56dd000-7f56d5711000 r-xp fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5711000-7f56d5911000 ---p 00034000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5911000-7f56d5912000 r--p 00034000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5912000-7f56d5913000 rw-p 00035000 fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5913000-7f56d5914000 rw-p 00:00 0 7f56d5914000-7f56d5bd2000 r-xp fd:01
Re: [pmacct-discussion] buffer overflow / backtrace on 1.5rc1
Running Ubuntu 12.04.2. Can't speak to the BGP config on the Juniper side, but I'll ask for that. I believe IPv6 might be in the mix here. I'll do the gdb bt and email you. On Wed, Dec 4, 2013 at 4:46 PM, Paolo Lucente pa...@pmacct.net wrote: Hi Joel, Wow, interesting. What OS are you running? What BGP capabilities are enabled and which address families are you sending over? It would help if you can run the daemon under gdb and collect 'bt' information (send it directly to me). Post in the same email also your config. We can take it from there. Cheers, Paolo On Wed, Dec 04, 2013 at 04:18:42PM -0800, Joel Krauska wrote: I get a pretty repeatable buffer overflow when trying to use nfacctd with BGP enabled. (threaded) It will run for a few moments and then bombs out. *** buffer overflow detected ***: nfacctd: Core Process [default] terminated === Backtrace: = /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f56d4dd1f47] /lib/x86_64-linux-gnu/libc.so.6(+0x109e40)[0x7f56d4dd0e40] nfacctd: Core Process [default](bgp_nlri_parse+0x15f)[0x46b17f] nfacctd: Core Process [default](bgp_update_msg+0x3a7)[0x46bb87] nfacctd: Core Process [default](skinny_bgp_daemon+0xc1f)[0x46e84f] nfacctd: Core Process [default](thread_runner+0x5b)[0x45f72b] /lib/x86_64-linux-gnu/libpthread.so.0(+0x7e9a)[0x7f56d508ee9a] /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f56d4dbb3fd] === Memory map: 0040-004ca000 r-xp fd:01 270072 /opt/pmacct/sbin/nfacctd 006c9000-006ca000 r--p 000c9000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006ca000-006cb000 rw-p 000ca000 fd:01 270072 /opt/pmacct/sbin/nfacctd 006cb000-0074c000 rw-p 00:00 0 00ab9000-00ada000 rw-p 00:00 0 [heap] 7f56c400-7f56c6e8c000 rw-p 00:00 0 7f56c6e8c000-7f56c800 ---p 00:00 0 7f56cbde2000-7f56cbdf7000 r-xp fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbdf7000-7f56cbff6000 ---p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff6000-7f56cbff7000 r--p 00014000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbff7000-7f56cbff8000 rw-p 00015000 fd:01 390697 /lib/x86_64-linux-gnu/libgcc_s.so.1 7f56cbfff000-7f56cc00 rw-p 00:00 0 7f56cc00-7f56d000 rw-p 00:00 0 7f56d3a0-7f56d3fb3000 rw-s 00:04 10398639 /dev/zero (deleted) 7f56d3fb3000-7f56d3fb4000 ---p 00:00 0 7f56d3fb4000-7f56d47b4000 rw-p 00:00 0 7f56d47b4000-7f56d48af000 r-xp fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d48af000-7f56d4aae000 ---p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aae000-7f56d4aaf000 r--p 000fa000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4aaf000-7f56d4ab rw-p 000fb000 fd:01 394152 /lib/x86_64-linux-gnu/libm-2.15.so 7f56d4ab-7f56d4ac6000 r-xp fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4ac6000-7f56d4cc5000 ---p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc5000-7f56d4cc6000 r--p 00015000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc6000-7f56d4cc7000 rw-p 00016000 fd:01 390743 /lib/x86_64-linux-gnu/libz.so.1.2.3.4 7f56d4cc7000-7f56d4e7c000 r-xp fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d4e7c000-7f56d507c000 ---p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d507c000-7f56d508 r--p 001b5000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d508-7f56d5082000 rw-p 001b9000 fd:01 394141 /lib/x86_64-linux-gnu/libc-2.15.so 7f56d5082000-7f56d5087000 rw-p 00:00 0 7f56d5087000-7f56d509f000 r-xp fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d509f000-7f56d529e000 ---p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529e000-7f56d529f000 r--p 00017000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d529f000-7f56d52a rw-p 00018000 fd:01 394150 /lib/x86_64-linux-gnu/libpthread-2.15.so 7f56d52a-7f56d52a4000 rw-p 00:00 0 7f56d52a4000-7f56d52a6000 r-xp fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d52a6000-7f56d54a6000 ---p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a6000-7f56d54a7000 r--p 2000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a7000-7f56d54a8000 rw-p 3000 fd:01 394156 /lib/x86_64-linux-gnu/libdl-2.15.so 7f56d54a8000-7f56d54db000 r-xp fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d54db000-7f56d56da000 ---p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56da000-7f56d56db000 r--p 00032000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56db000-7f56d56dd000 rw-p 00033000 fd:01 131070 /usr/lib/libGeoIP.so.1.4.8 7f56d56dd000-7f56d5711000 r-xp fd:01 135098 /usr/lib/x86_64-linux-gnu/libpcap.so.1.1.1 7f56d5711000-7f56d5911000 ---p 00034000
