Hi Tim, Can you please track down memory utilization to see if it could be something related to that? Also, can you try performing a query with lock:
shell> pmacct -l < .. parameters .. > If none of this helps, then yes, proceed to capture segfault data with gdb. Cheers, Paolo On Fri, Jun 20, 2014 at 11:45:57AM -0700, Tim Jackson wrote: > We're having some issues using nfacctd with IMT.. After running for > ~6-8 hours ingesting flow data, we see segfaults and the pmacct client > ceases to function properly returning: > > "ERROR: missing EOF from server" > > Querying pmacct client every 2 minutes with: > > pmacct -p nfacctd-dst.pipe -O json -a -c "tag2" -M "2;3" -T "packets,1000" > > If that returns data, we then: > > pmacct -p nfacctd-dst.pipe -e > > Associated segfault from nfacctd daemon: > > Jun 20 10:32:02 kernel: nfacctd[21874]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 10:36:02 kernel: nfacctd[21930]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 10:40:02 kernel: nfacctd[21983]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 10:46:02 kernel: nfacctd[22068]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 10:54:02 kernel: nfacctd[22188]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 11:02:02 kernel: nfacctd[22350]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 11:04:02 kernel: nfacctd[22374]: segfault at 21 ip > 000000000047613d sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > Jun 20 11:32:02 kernel: nfacctd[22903]: segfault at 4d8e6600 ip > 0000000000476103 sp 00007fff9ad3e1b0 error 4 in nfacctd[400000+de000] > > nfacctd Config: > > !daemonize: true > nfacctd_port: 5680 > plugins: memory[full], memory[dst] > > aggregate[full]: tag, tag2, in_iface, out_iface, src_as, dst_as, > src_host, dst_host, proto, src_port, dst_port, tcpflags, ext_comm, > src_ext_comm > aggregate[dst]: tag, tag2, in_iface, dst_as, dst_host > > imt_path[full]: /tmp/nfacctd-full.pipe > imt_path[dst]: /tmp/nfacctd-dst.pipe > > pre_tag_map: /opt/pmacct/etc/pretag.map > > nfacctd_time_new: true > nfacctd_renormalize: true > > plugin_pipe_size: 131072000 > plugin_buffer_size: 6400 > imt_buckets: 65537 > imt_mem_pools_size: 1024000 > > I'm working on capturing the debug output from nfacctd when this > segfault happens, but is there anything else I should capture to help > figure out why this is happening? > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
