HI Peter,
I'm sorry. I forgot to change the same use of the same statement in line
1959 of ASSP_AFC.pl 4.35.
This is solved in 4.36 - it is just released.
Thomas
Von: Peter Hinman <peter.hin...@myib.com>
An: assp-user@lists.sourceforge.net
Datum: 19.08.2016 01:31
Betreff: Re: [Assp-user] ASSP_AFC 4.35 released
Hi Thomas -
I've installed 4.35 and now assp is crashing. On restart, I get the
following line in the log file.
2016-08-18 23:22:08 [Worker_1] Warning: got unexpected signal SEGV in
Worker_1: package - ASSP_AFC, file - /opt/assp/Plugins/ASSP_AFC.pm, line -
1959!
Running assp 16090 on linux, Perl 5.18.2. I'll try updating assp and see
if that makes a difference.
Peter
On 8/18/2016 6:23 AM, James Brown wrote:
> Thanks Thomas,
>
> that seems to have fixed it so far.
>
> Will now try to work out why it finds .gz files unrecognisable.
>
> Thanks,
>
> James.
>
>> On 18 Aug. 2016, at 6:27 pm, Thomas Eckardt
<thomas.ecka...@thockar.com> wrote:
>>
>> I've just released ASSP_AFC 4.35 (CVS and SF) - the SEGV should be
fixed
>> there.
>> Depending on the used OS and Perl it may be possible, that an
additionaly
>> small correction of assp.pl is required to fix this SEGV.
>> Try ASSP_AFC 4.35 and tell me if it works for you.
>>
>> assp.pl correction is: move the two lines 6996 + 6997
>>
>> our ($SAVEOUT, $SAVEERR);
>> our $lockOUT:shared;
>>
>> to: after the line 147
>>
>> our $islendian = (unpack("h*", pack("s", 1)) =~ /^1/) ;
>> our ($SAVEOUT, $SAVEERR);
>> our $lockOUT:shared;
>>
>>
>> For Perl 5.16.3 and higher, the assp.pl correction should be not
>> required.
>>
>> Thomas
>>
>>
>>
>>
>>
>> Von: James Brown <jlbr...@bordo.com.au>
>> An: For Users of ASSP <assp-user@lists.sourceforge.net>
>> Datum: 18.08.2016 03:56
>> Betreff: Re: [Assp-user] ASSP_AFC 4.34 released
>>
>>
>>
>> Hi Thomas.
>>
>> Seeing this a lot after upgrading to version 4.34:
>>
>> Aug-18-16 11:29:00 [Worker_1] Warning: possibly virus infected file
(can't
>> open archive)
>>
'/Applications/assp/tmp/zip_1_1471483740/proximus.be_bordo.com.au_1471384504_1471470908.xml.gz'
>> - Unrecognized archive format
>> Aug-18-16 11:29:00 [Worker_1] Warning: fatal - libarchive extract
>>
'/Applications/assp/tmp/zip_1_1471483740/proximus.be_bordo.com.au_1471384504_1471470908.xml.gz'
>> - <-30> - Unrecognized archive format
>> Aug-18-16 11:29:00 [Worker_1] Warning: got unexpected signal SEGV in
>> Worker_1: package - ASSP_AFC, file -
>> /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765!
>> Warning: got unexpected signal SEGV in Worker_1: package - ASSP_AFC,
file
>> - /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765! (suppressed
30122
>> concurrent equal 'Warning' loglines from all Workers)
>> Aug-18-16 11:29:17 [Worker_10000] Info: looking for files to (re)send
>> Aug-18-16 11:29:16 [Worker_1] Warning: got unexpected signal SEGV in
>> Worker_1: package - ASSP_AFC, file -
>> /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765!
>>
>> I think this is two issues: 1) the unrecognised archive format and 2)
the
>> unexpected signal SEGV error, because I see lots of SEGV errors without
>> the archive format error:
>>
>> Aug-18-16 11:32:08 [Worker_10000] Backup: 3,691,737 records of database
>> table HMMdb to file /Applications/assp/HMMdb
>> Warning: got unexpected signal SEGV in Worker_1: package - ASSP_AFC,
file
>> - /Applications/assp/Plugins/ASSP_AFC.pm, line - 1765! (suppressed
72912
>> concurrent equal 'Warning' loglines from all Workers)
>> Aug-18-16 11:32:08 [Worker_10000] Info: saving Stats in file
asspstats.sav
>>
>> Note also that the Warning line does not have a date/time stamp
followed
>> by [Worker_1], it just starts with ‘Warning’.
>>
>>
>> Also just noticed this:
>>
>> Aug-18-16 11:23:14 [Main_Thread] Info: unable to detect any running
worker
>> for a new connection - wait (max 30 seconds)
>> Aug-18-16 11:23:14 [Main_Thread] Info: unable to detect any running
worker
>> for a new connection - wait (max 30 seconds)
>> Aug-18-16 11:23:14 [Main_Thread] Info: unable to detect any running
worker
>> for a new connection - wait (max 30 seconds)
>> Aug-18-16 11:23:15 [Main_Thread] Info: unable to detect any running
worker
>> for a new connection - wait (max 30 seconds)
>> Aug-18-16 11:23:15 [Main_Thread] Info: ConnectionTransferTimeOut (30
>> seconds) is now reached
>> Aug-18-16 11:23:15 [Main_Thread] Warning: Main_Thread is unable to
>> transfer connection to any worker - try again!
>> Aug-18-16 11:23:15 [Main_Thread] Error: Main_Thread is unable to
transfer
>> connection to any worker within 120 seconds - restart ASSP!
>> Aug-18-16 11:23:15 [Main_Thread] Initializing shutdown sequence
>>
>> ASSP version 2.5.2(16207)
>>
>> Thanks,
>>
>> James.
>>
>>
>>> On 15 Aug. 2016, at 4:23 pm, Thomas Eckardt
<thomas.ecka...@thockar.com>
>> wrote:
>>> Hi all,
>>>
>>> The ASSP_AFC plugin version 4.34 is released at CVS and SF download.
>>>
>>> It contains additionaly code to detect any MS-Office macro as
executable
>>> code (exe-bin).
>>> It tries to detect any obfuscated JS code of the "lucky virus" as
>>> executable code (exe-bin).
>>>
>>> Thomas
>>>
>>>
>>> DISCLAIMER:
>>> *******************************************************
>>> This email and any files transmitted with it may be confidential,
>> legally
>>> privileged and protected in law and are intended solely for the use of
>> the
>>> individual to whom it is addressed.
>>> This email was multiple times scanned for viruses. There should be no
>>> known virus in this email!
>>> *******************************************************
>>>
>>>
>>
------------------------------------------------------------------------------
>>> What NetFlow Analyzer can do for you? Monitors network bandwidth and
>> traffic
>>> patterns at an interface-level. Reveals which users, apps, and
protocols
>> are
>>> consuming the most bandwidth. Provides multi-vendor support for
NetFlow,
>>> J-Flow, sFlow and other flows. Make informed decisions using capacity
>>> planning reports.
>>
http://sdm.link/zohodev2dev_______________________________________________
>>> Assp-user mailing list
>>> Assp-user@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/assp-user
>>
>>
>>
------------------------------------------------------------------------------
>> _______________________________________________
>> Assp-user mailing list
>> Assp-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/assp-user
>>
>>
>>
>>
>> DISCLAIMER:
>> *******************************************************
>> This email and any files transmitted with it may be confidential,
legally
>> privileged and protected in law and are intended solely for the use of
the
>>
>> individual to whom it is addressed.
>> This email was multiple times scanned for viruses. There should be no
>> known virus in this email!
>> *******************************************************
>>
>>
>>
------------------------------------------------------------------------------
>> _______________________________________________
>> Assp-user mailing list
>> Assp-user@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
>
------------------------------------------------------------------------------
> _______________________________________________
> Assp-user mailing list
> Assp-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-user
------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
