Nope, even with the ASSP.pl tweak, I'm still getting Aug-18-16 18:06:33 Warning: got unexpected signal SEGV in Worker_2: package - ASSP_AFC, file - c:/ASSPPlugins/ASSP_AFC.pm, line - 1959!
On Thu, Aug 18, 2016 at 5:47 PM, K Post <nntp.p...@gmail.com> wrote: > I'm running Perl 5.20.1 on Windows and even with AFC 4.35 I'm getting LOTS > of > > Aug-18-16 17:37:06 Warning: got unexpected signal SEGV in Worker_1: > package - ASSP_AFC, file - c:/ASSP/Plugins/ASSP_AFC.pm, line - 1959! > > > I'll try the ASSP.pl modification, but wanted to raise a flag since you > indicated ithat the mod shouldn't be necessary for Perl 5.16 or newer. > > On Thu, Aug 18, 2016 at 8:23 AM, James Brown <jlbr...@bordo.com.au> wrote: > >> Thanks Thomas, >> >> that seems to have fixed it so far. >> >> Will now try to work out why it finds .gz files unrecognisable. >> >> Thanks, >> >> James. >> >> > On 18 Aug. 2016, at 6:27 pm, Thomas Eckardt <thomas.ecka...@thockar.com> >> wrote: >> > >> > I've just released ASSP_AFC 4.35 (CVS and SF) - the SEGV should be fixed >> > there. >> > Depending on the used OS and Perl it may be possible, that an >> additionaly >> > small correction of assp.pl is required to fix this SEGV. >> > Try ASSP_AFC 4.35 and tell me if it works for you. >> > >> > assp.pl correction is: move the two lines 6996 + 6997 >> > >> > our ($SAVEOUT, $SAVEERR); >> > our $lockOUT:shared; >> > >> > to: after the line 147 >> > >> > our $islendian = (unpack("h*", pack("s", 1)) =~ /^1/) ; >> > our ($SAVEOUT, $SAVEERR); >> > our $lockOUT:shared; >> > >> > >> > For Perl 5.16.3 and higher, the assp.pl correction should be not >> > required. >> > >> > Thomas >> > >> > >> > >> > >> > >> > Von: James Brown <jlbr...@bordo.com.au> >> > An: For Users of ASSP <assp-user@lists.sourceforge.net> >> > Datum: 18.08.2016 03:56 >> > Betreff: Re: [Assp-user] ASSP_AFC 4.34 released >> > >> > >> > >> > Hi Thomas. >> > >> > Seeing this a lot after upgrading to version 4.34: >> > >> > Aug-18-16 11:29:00 [Worker_1] Warning: possibly virus infected file >> (can't >> > open archive) >> > '/Applications/assp/tmp/zip_1_1471483740/proximus.be_bordo.c >> om.au_1471384504_1471470908.xml.gz' >> > - Unrecognized archive format >> > Aug-18-16 11:29:00 [Worker_1] Warning: fatal - libarchive extract >> > '/Applications/assp/tmp/zip_1_1471483740/proximus.be_bordo.c >> om.au_1471384504_1471470908.xml.gz' >> > - <-30> - Unrecognized archive format >> > Aug-18-16 11:29:00 [Worker_1] Warning: got unexpected signal SEGV in >> > Worker_1: package - ASSP_AFC, file - >> > /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765! >> > Warning: got unexpected signal SEGV in Worker_1: package - ASSP_AFC, >> file >> > - /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765! (suppressed >> 30122 >> > concurrent equal 'Warning' loglines from all Workers) >> > Aug-18-16 11:29:17 [Worker_10000] Info: looking for files to (re)send >> > Aug-18-16 11:29:16 [Worker_1] Warning: got unexpected signal SEGV in >> > Worker_1: package - ASSP_AFC, file - >> > /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765! >> > >> > I think this is two issues: 1) the unrecognised archive format and 2) >> the >> > unexpected signal SEGV error, because I see lots of SEGV errors without >> > the archive format error: >> > >> > Aug-18-16 11:32:08 [Worker_10000] Backup: 3,691,737 records of database >> > table HMMdb to file /Applications/assp/HMMdb >> > Warning: got unexpected signal SEGV in Worker_1: package - ASSP_AFC, >> file >> > - /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765! (suppressed >> 72912 >> > concurrent equal 'Warning' loglines from all Workers) >> > Aug-18-16 11:32:08 [Worker_10000] Info: saving Stats in file >> asspstats.sav >> > >> > Note also that the Warning line does not have a date/time stamp followed >> > by [Worker_1], it just starts with ‘Warning’. >> > >> > >> > Also just noticed this: >> > >> > Aug-18-16 11:23:14 [Main_Thread] Info: unable to detect any running >> worker >> > for a new connection - wait (max 30 seconds) >> > Aug-18-16 11:23:14 [Main_Thread] Info: unable to detect any running >> worker >> > for a new connection - wait (max 30 seconds) >> > Aug-18-16 11:23:14 [Main_Thread] Info: unable to detect any running >> worker >> > for a new connection - wait (max 30 seconds) >> > Aug-18-16 11:23:15 [Main_Thread] Info: unable to detect any running >> worker >> > for a new connection - wait (max 30 seconds) >> > Aug-18-16 11:23:15 [Main_Thread] Info: ConnectionTransferTimeOut (30 >> > seconds) is now reached >> > Aug-18-16 11:23:15 [Main_Thread] Warning: Main_Thread is unable to >> > transfer connection to any worker - try again! >> > Aug-18-16 11:23:15 [Main_Thread] Error: Main_Thread is unable to >> transfer >> > connection to any worker within 120 seconds - restart ASSP! >> > Aug-18-16 11:23:15 [Main_Thread] Initializing shutdown sequence >> > >> > ASSP version 2.5.2(16207) >> > >> > Thanks, >> > >> > James. >> > >> > >> >> On 15 Aug. 2016, at 4:23 pm, Thomas Eckardt < >> thomas.ecka...@thockar.com> >> > wrote: >> >> >> >> Hi all, >> >> >> >> The ASSP_AFC plugin version 4.34 is released at CVS and SF download. >> >> >> >> It contains additionaly code to detect any MS-Office macro as >> executable >> > >> >> code (exe-bin). >> >> It tries to detect any obfuscated JS code of the "lucky virus" as >> >> executable code (exe-bin). >> >> >> >> Thomas >> >> >> >> >> >> DISCLAIMER: >> >> ******************************************************* >> >> This email and any files transmitted with it may be confidential, >> > legally >> >> privileged and protected in law and are intended solely for the use of >> > the >> >> >> >> individual to whom it is addressed. >> >> This email was multiple times scanned for viruses. There should be no >> >> known virus in this email! >> >> ******************************************************* >> >> >> >> >> > ------------------------------------------------------------ >> ------------------ >> >> What NetFlow Analyzer can do for you? Monitors network bandwidth and >> > traffic >> >> patterns at an interface-level. Reveals which users, apps, and >> protocols >> > are >> >> consuming the most bandwidth. Provides multi-vendor support for >> NetFlow, >> > >> >> J-Flow, sFlow and other flows. Make informed decisions using capacity >> >> planning reports. >> > http://sdm.link/zohodev2dev_________________________________ >> ______________ >> >> Assp-user mailing list >> >> Assp-user@lists.sourceforge.net >> >> https://lists.sourceforge.net/lists/listinfo/assp-user >> > >> > >> > >> > ------------------------------------------------------------ >> ------------------ >> > _______________________________________________ >> > Assp-user mailing list >> > Assp-user@lists.sourceforge.net >> > https://lists.sourceforge.net/lists/listinfo/assp-user >> > >> > >> > >> > >> > DISCLAIMER: >> > ******************************************************* >> > This email and any files transmitted with it may be confidential, >> legally >> > privileged and protected in law and are intended solely for the use of >> the >> > >> > individual to whom it is addressed. >> > This email was multiple times scanned for viruses. There should be no >> > known virus in this email! >> > ******************************************************* >> > >> > >> > ------------------------------------------------------------ >> ------------------ >> > _______________________________________________ >> > Assp-user mailing list >> > Assp-user@lists.sourceforge.net >> > https://lists.sourceforge.net/lists/listinfo/assp-user >> >> >> >> ------------------------------------------------------------ >> ------------------ >> _______________________________________________ >> Assp-user mailing list >> Assp-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-user >> > >
------------------------------------------------------------------------------
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user