I'll run additional tests today with strace and will share the output. On Fri, Aug 7, 2015 at 5:12 AM Daniel Borkmann <borkm...@iogearbox.net> wrote:
> On 08/07/2015 12:01 AM, Stefano Pirrello wrote: > > I took another look at my server and saw the process is hung up again. > See > > below on how many captures were successful but eventually they stopped > > generating. > > > > ~/captures$ ls -ltr > > total 3297540 > > -rwxr--r-- 1 n3tus3r n3tus3r 6225 Aug 3 23:06 acloudshark-upload.py > > -rw-r--r-- 1 root root 151763085 Aug 6 11:59 NOR-1438829948.pcap > > -rw------- 1 n3tus3r n3tus3r 170 Aug 6 12:00 nohup.out > > -rw-r--r-- 1 root root 614790736 Aug 6 12:15 NOR-1438876806.pcap > > -rw-r--r-- 1 root root 531106907 Aug 6 12:30 NOR-1438877706.pcap > > -rw-r--r-- 1 root root 469131877 Aug 6 12:45 NOR-1438878606.pcap > > -rw-r--r-- 1 root root 447301234 Aug 6 13:00 NOR-1438879506.pcap > > -rw-r--r-- 1 root root 536482188 Aug 6 13:15 NOR-1438880406.pcap > > -rw-r--r-- 1 root root 502705750 Aug 6 13:30 NOR-1438881306.pcap > > -rw-r--r-- 1 root root 123361242 Aug 6 13:33 NOR-1438882206.pcap > > > > > > You can also see how the process is still running: > > > > $ sudo ps -ef | grep netsniff > > [sudo] password for n3tus3r: > > root 885 618 0 12:00 pts/0 00:00:00 sudo nohup netsniff-ng > --in > > bond0 --out . --prefix NOR- --interval 15min -s -H -f net 10.10.192.0/18 > > root 886 885 22 12:00 pts/0 01:22:08 netsniff-ng --in bond0 > > --out . --prefix NOR- --interval 15min -s -H -f net 10.10.192.0/18 > > n3tus3r 1326 1297 0 18:00 pts/1 00:00:00 grep --color=auto > netsniff > > Hmm, is there any additional debugging information where it could be hung? > Would strace give any details? > -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to netsniff-ng+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.