On Tue, May 16, 2017 at 11:53:22AM +0000, Stuart Henderson wrote: > On 2017-05-16, Nagarjun G <[email protected]> wrote: > > Hi Team, > > > > We are running an OpenBGPD router inside an AS we own. We are collecting > > BGP RIB files every 2 hours and UPDATE files every 5 mins. I tried parsing > > these files using some well known parses like bgpstream and mabo. I am able > > to parse RIB files successfully but I am unable to parse UPDATE files. I > > see that files are getting truncated. Developers of mabo are saying that > > files may be corrupted, mabo will not parse MRT headers are corrupted. > > > > *Commands used to dump files:* > > > > dump table-v2 "/tmp/rib-dump-v2-%Y%m%d%H%M" 7200 > > dump updates in "/tmp/updates-%Y%m%d%H%M" 300 > > > > *Error while parsing UPDATE file using mabo:* > > > > $ ./mabo dump updates-in-1223.gz > > {"type":"update","timestamp":1493880788.0,"peer_as":4755.0,"peer_ip":"121.244.206.224","as_path":"4755 > > 6453 7575 38022 55702","announce":["49.0.31.0/24"],"withdraw":[]} > > [..] > > MRT parsing error: MRT dump is truncated: 1493880791 16/4 138 > > > > It starts parsing the file, then throws error. > > > > Could someone help me to fix the problem. > > Thanks in Advance > > > > Regards, > > Nagarjun > > > > I've just tried mabo on a mrt updates dump on an OpenBSD -current > system and it works here. > > Is bgpdump able to read the file? (just "pkg_add libbgpdump" and > "bgpdump $file"). If so, if you lookup the last entry that mabo was > able to parse, and look at the next entry in bgpdump (presumably the > one triggering the failure), does that give any clues about what > the problem might be? >
I guess this is the same bug reported in Dec last year and fixed in rev 1.356 of session.c. So this is fixed in 6.1 and -current but not in 6.0. -- :wq Claudio
