> (gdb) bt full > #0 ndpi_search_bgp (ndpi_struct=0xa1853e43000, flow=0xa18de6fa800) at > protocols/bgp.c:43 > No locals. > #1 0x00000a1616ea210b in check_ndpi_tcp_flow_func (ndpi_struct= > 0xa1853e43000, flow=0xa18de6fa800, ndpi_selection_packet=0xa189424b5c0) > at ndpi_main.c:3148 > proto_id = Variable "proto_id" is not available. > > (gdb) p packet > No symbol "packet" in current context. > > Does this look like this: https://github.com/ntop/nDPI/issues/181 ? Or > it is something else?
2.4 already has the "hardening" diff that was committed in response to that issue. Can you send me (offlist) a copy of packets captured on the interface covering a time when it crashes? i.e. run something like this in one terminal tcpdump -i <interface> -s 2000 -w /tmp/ntop.pcap Run ntopng in another terminal, and ^C the tcpdump after ntopng crashes. Hopefully the file won't be too huge. (It's possible to split a capture file based on timestamps using tcpslice if necessary, though). It will be a lot easier to track down If I'm able to reproduce it here.
