Your message dated Mon, 14 Mar 2005 18:29:22 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Closed
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Mar 2002 05:20:58 +0000
>From [EMAIL PROTECTED] Sun Mar 17 23:20:58 2002
Return-path: <[EMAIL PROTECTED]>
Received: from athena.beakstar.com [66.147.131.187] (mail)
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 16mpZq-0007Hy-00; Sun, 17 Mar 2002 23:20:58 -0600
Received: from mtwomey (helo=localhost)
by athena.beakstar.com with local-esmtp (Exim 3.34 #1 (Debian))
id 16mpNu-00013t-00
for <[EMAIL PROTECTED]>; Sun, 17 Mar 2002 23:08:38 -0600
Date: Sun, 17 Mar 2002 23:08:38 -0600 (CST)
From: Matthew Twomey <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: ngrep-1.40-1 bus error on SS20 (sparc architecture)
Message-ID: <[EMAIL PROTECTED]>
X-Debbugs-CC: [EMAIL PROTECTED], debian-sparc@lists.debian.org
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Delivered-To: [EMAIL PROTECTED]
Package: ngrep
Version: 1.40-1
Severity: grave
This appears to be a bug specific to the the Woody sparc port of this
package. I am running on a SS20, single hyper-sparc, 192M.
Upon execution I get a bus error:
debian3:/# ngrep
interface: eth0 (192.168.20.0/255.255.255.248)
Bus error
debian3:/#
After some investigation I have made the following observations:
1. This may have to do with libpcap0-0.6.2-2. I force installed
libpcap0-0.4a6-3 and the problem doesn't seem to occur.
2. I tried several other packages that rely on libpcap0 and many of them
fail with a "Bus error" when using libpcap0-0.6.2-2. tcpflow is one other
such package. tcpdump (which I believe is co-developed with libpcap??)
does not have this problem.
3. Browsing the Internet a little revealed something about aligned -vs-
unaligned packets and libpcap. I am a novice programmer and have very
little socket experience, so do not fully understand this. It seems this
problem doesn't happen on i386 architecture. I also found references to
the fact that libpcap 0.6 can't guarantee aligned packets, where libpcap
0.4 versions could?? Again, my understanding is limited.
4. I did a little analysis of the tcpdump code, and see that it has code
branches to handle "unaligned" packets. It copies something into a buffer
and back, I assume to align it?? This can be seem in tcpdump's print-ip.c
file - search for #ifdef LBL_ALIGN.
5. I hacked together similar code for ngrep based on this "branch" in
tcpdump and inserted it into ngrep.c. I had limited success with this - no
more bus error and ngrep seems to function reasonably, but many things are
broken - like silent mode doesn't catch what it should be, ngrep outputs
way too many bytes for a single packet, ...etc. I'm sure this is due to my
not understanding the code and what's going on here.
In closing it seems that libpcap 0.6 changed a couple of things and the
ngrep source may not yet have the code to deal with these changes on a
sparc architecture. I am hoping that someone with a better understanding
of these issues can help out.
-Matt
---------------------------------------
Received: (at 138847-done) by bugs.debian.org; 14 Mar 2005 18:29:23 +0000
>From [EMAIL PROTECTED] Mon Mar 14 10:29:23 2005
Return-path: <[EMAIL PROTECTED]>
Received: from www.steve.org.uk (skx.vm.bytemark.co.uk) [80.68.89.210]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DAuJf-0004xt-00; Mon, 14 Mar 2005 10:29:23 -0800
Received: from steve by skx.vm.bytemark.co.uk with local (Exim 3.35 #1 (Debian))
id 1DAuJe-0002Rv-00
for <[EMAIL PROTECTED]>; Mon, 14 Mar 2005 18:29:22 +0000
Date: Mon, 14 Mar 2005 18:29:22 +0000
From: Steve Kemp <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Closed
Message-ID: <[EMAIL PROTECTED]>
Reply-To: Steve Kemp <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
Sender: Steve Kemp <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-2.0 required=4.0 tests=BAYES_00,ONEWORD autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
This code is no longer present in the newest version of ngrep,
so it can't have been reintroduced.
I'm going to close this now.
Steve
--
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
