Great catch Matthias. Also, thank you for the detailed report, which should
allow me to repro this.
Before I go down this route, would you mind testing whether this is an issue
with the 2.5 beta 1 version I sent last week on the mailing list (if you are
not subscribed, you should be able to fetch it on the archive). Lots of
changes/ bug fixes in that version, so it would be worth checking.

Also, what OS are you using.

Christian

On Wed, Aug 20, 2008 at 5:46 AM, mluft <[EMAIL PROTECTED]>wrote:

> Hi,
>
> I'm running Capture with one server an 6 clients. After ~48h it crashes
> reproducible.
> Until now, I gathered two different error-messages (which point to the same
> direction):
> * java.io.IOException: Cannot run program "./revert": java.io.IOException:
> error=24, Too many open files
> * Exception in thread "ClientEC" java.lang.OutOfMemoryError: Java heap
> space
>
> I attached my config.xml + the complete errormessages (they repeat in an
> endless loop).
> I couldn't find any open bug which addresses my problem, so some hints
> would be great ;-)
>
> Thx & regards,
> Matthias
>
> [Aug 19, 2008 11:40:00 PM-192.168.42.10:902-31789152] ClientSetState:
> DISCONNECTED
> [Aug 19, 2008 11:40:00 PM-192.168.42.10:902-31789152] VMSetState:
> WAITING_TO_BE_REVERTED
> Exception in thread "ClientEC" java.lang.OutOfMemoryError: Java heap space
> [Aug 19, 2008 11:40:01 PM-192.168.42.10:902-31789152] VMSetState: REVERTING
> [Aug 19, 2008 11:40:08 PM-192.168.42.10:902-31789152] VMSetState: RUNNING
> <connect vm-server-id="27959626" vm-id="31789152"/>
> [Aug 19, 2008 11:40:09 PM-192.168.42.10:902-31789152] ClientSetState:
> CONNECTED
> [Aug 19, 2008 11:40:09 PM-192.168.42.10:902-31789152] ClientSetState:
> WAITING
> <visit-event identifier="939904110" program="iexplore" time="19/8/2008
> 14:43:59.144" type="start" malicious="0"><item url="sale.spyguardpro.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="sale.trojansfilter.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item>
> <item url="sale.trustedprotection.com" program="iexplore"
> major-error-code="0" minor-error-code="0" time="19/8/2008 14:43:59.144"
> visited="0"></item><item url="salevisitor.net" program="iexplore"
> major-error-code="0" minor-error-code="0" time="19/8/2008 14:43:59.144"
> visited="0"></item><item url="sale.winsecureav.com" program="iexplore"
> major-error-code="0" minor-error-code="0" time="19/8/2008 14:43:59.144"
> visited="0"></item><item url="sale.winspycontrol.com" program="iexplore"
> major-error-code="0" minor-error-code="0" time="19/8/2008 14:43:59.144"
> visited="0"></item><item url="salma.sexybabesx.com" program="iexplore"
> major-error-code="0" minor-error-code="0" time="19/8/2008 14:43:59.144"
> visited="0"></item><item url="samairearmstrong.sexybabesx.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="samsclub33.pochta.ru"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="sandra.sexybabesx.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="saniamirza.sexybabesx.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="sansendommagement.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="santacruzsentinel.112.2o7.net"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="
> santacruzsentinelcom.112.2o7.net" program="iexplore" major-error-code="0"
> minor-error-code="0" time="19/8/2008 14:43:59.144" visited="0"></item><i
> tem url="sa.oasfile.aftenposten.no" program="iexplore"
> major-error-code="0" minor-error-code="0" time="19/8/2008 14:43:59.144"
> visited="0"></item><item url="sashacohen.sexybabesx.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="s.as-us.falkag.net"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="sat1.ivwbox.de"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="sat-city-ads.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item><item url="satiristlist.com"
> program="iexplore" major-error-code="0" minor-error-code="0" time="19/8/2008
> 14:43:59.144" visited="0"></item></visit-event>
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
>        UrlSetState: ERROR
> [Aug 19, 2008 11:40:10 PM-192.168.42.10:902-31789152] ClientSetState:
> DISCONNECTED
> [Aug 19, 2008 11:40:10 PM-192.168.42.10:902-31789152] VMSetState:
> WAITING_TO_BE_REVERTED
> Exception in thread "ClientEC" java.lang.OutOfMemoryError: Java heap space
> [Aug 19, 2008 11:40:11 PM-192.168.42.10:902-31789152] VMSetState: REVERTING
> [Aug 19, 2008 11:40:18 PM-192.168.42.10:902-31789152] VMSetState: RUNNING
> <connect vm-server-id="27959626" vm-id="31789152"/>
> [Aug 19, 2008 11:40:18 PM-192.168.42.10:902-31789152] ClientSetState:
> CONNECTED
> [Aug 19, 2008 11:40:18 PM-192.168.42.10:902-31789152] ClientSetState:
> WAITING
>
> [Aug 18, 2008 8:36:56 PM-192.168.42.10:902-12755250] VMSetState: ERROR
> [192.168.42.30:902-19184575] Client inactivity, reverting VM
> [Aug 18, 2008 8:37:35 PM-192.168.42.30:902-19184575] VMSetState:
> WAITING_TO_BE_REVERTED
> [Aug 18, 2008 8:37:37 PM-192.168.42.30:902-19184575] VMSetState: REVERTING
> java.io.IOException: Cannot run program "./revert": java.io.IOException:
> error=24, Too many open files
>        at java.lang.ProcessBuilder.start(ProcessBuilder.java:459)
>        at java.lang.Runtime.exec(Runtime.java:593)
>        at java.lang.Runtime.exec(Runtime.java:466)
>        at capture.VMwareServer$1VixThread.run(VMwareServer.java:124)
> Caused by: java.io.IOException: java.io.IOException: error=24, Too many
> open files
>        at java.lang.UNIXProcess.<init>(UNIXProcess.java:148)
>        at java.lang.ProcessImpl.start(ProcessImpl.java:65)
>        at java.lang.ProcessBuilder.start(ProcessBuilder.java:452)
>        ... 3 more
> [Aug 18, 2008 8:37:37 PM 192.168.42.30:902-19184575] Unable to access
> external Vix library.
> [Aug 18, 2008 8:37:38 PM 192.168.42.30:902-19184575] VMware error 11
> [Aug 18, 2008 8:37:38 PM-192.168.42.30:902-19184575] VMSetState: ERROR
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:48 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.10:902-12755250] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.50:902-22310437] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.30:902-19184575] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.40:902-19362639] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.60:902-31737213] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
> [Aug 18, 2008 8:38:49 PM 192.168.42.20:902-4669910] Reverting VM timed
> out.
>
> _______________________________________________
> Capture-HPC mailing list
> Capture-HPC@public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/capture-hpc
>
>


-- 
----
Web: http://www.mcs.vuw.ac.nz/~cseifert

PGP key
http://www.mcs.vuw.ac.nz/~cseifert/pgpkey.txt
Primary key fingerprint: E979 0D9A 9187 D821 F86F B712 C8DB 0583 B046 BAEF
_______________________________________________
Capture-HPC mailing list
Capture-HPC@public.honeynet.org
https://public.honeynet.org/mailman/listinfo/capture-hpc

Reply via email to