HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

havp[23572]: segfault at 0000000000000010 rip 000000000806a7
http://havp.hege.li/forum/viewtopic.php?f=3&t=300
Page 1 of 2

Author:  butz [ 09 Oct 2007 05:09 ]
Post subject:  havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Hi,

There are some strange message show in system log, attach for reference

havp[23572]: segfault at 0000000000000010 rip 000000000806a728 rsp 00000000ffffcab0 error 4
havp[23796]: segfault at 0000000000000010 rip 000000000806a728 rsp 00000000ffffcab0 error 4
havp[23594]: segfault at 0000000000000010 rip

Centos 4 update 5 x64 version

Anybody meet similar problem?

Author:  hege [ 09 Oct 2007 10:52 ]
Post subject: 

I don't think HAVP is still safe for 64-bit systems. Never had one to test properly.

Author:  boran [ 26 Nov 2008 11:41 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

I get these several times per day:
Quote:
kernel: [4147656.066986] havp[11132]: segfault at 0000000000000014 rip 000000000042214c rsp 00007fffe6163e40 error 4


Ubuntu 7.10

uname -a
Linux 2.6.22-14-server #1 SMP Tue Feb 12 08:27:05 UTC 2008 i686 GNU/Linux

I have about 100k GETs per day through the proxy, am running 300 processes in parallel, with Squid between the PCs and havp.

Users havn't complained, but I'd like to know why this happens.

Have others the same problem? Any idea where to start searching? Havp itself does not log errors that might indicate an issue..

Author:  hege [ 26 Nov 2008 13:54 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Is this 64-bit system too?

Unfortunately there is a need for developer to fix things..

Author:  boran [ 26 Nov 2008 16:23 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

This is not 64 bit, "uname -a" shows x86_64 for such systems.

Author:  hege [ 26 Nov 2008 16:26 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Do you use library scanner? ClamAV? Recent version?

It's also possible that it's the havp-clamav-library process which is crashing. You could try changing to clamd to see if it "fixes" the issue.

Author:  boran [ 26 Nov 2008 17:32 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Yes its the clam library version, the libclamav2 package in Ubuntu 7.10.

Versions: 0.91.2-3ubuntu2.4

I see to remember from the docs that the library was recommended over the clam daemon?

Sean

Author:  hege [ 26 Nov 2008 17:41 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

boran wrote:
Yes its the clam library version, the libclamav2 package in Ubuntu 7.10.

Versions: 0.91.2-3ubuntu2.4

I see to remember from the docs that the library was recommended over the clam daemon?


Yes library is preferred for better control of scanner. I seriously recommend getting 0.94.2, it makes no sense to keep such ancient "stable" (such word does not exist in spam/virus world) version. There have been many new features and fixes since.

For debian there is volatile-repository that has always the newest versions, I don't know if ubuntu has such. You may have to compile.

Author:  boran [ 02 Dec 2008 15:10 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

I've upgraded from Ubuntu 7.10 to 8.04, and thus also the clamav libraries.
No segfaults so far...

Author:  boran [ 08 Jan 2009 00:45 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Just to note the segfaults started again before Christmas and again now. With 100k hits per day there are maybe 5-10 seg faults.

I've tried to match visited sites from the squid log to find a pattern, but no luck yet.
Its that kernel that kills the process, so its not obvious to me how to trace this within havp. The system is not overloaded in terms or cpu, memory or i/o.

Any suggestions on tracing the issue?

Thanks in advance,

Author:  karesmakro [ 14 Jan 2009 09:15 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

It's a presumption: Are you sure, your memory is working correctly? If you have much memory, the system needs a little time to use the whole memory.
A friend of me is using 8GB memory and had the same problems. After the system is working correctly for a few of days, suddenly the system says segfaults.

Author:  boran [ 14 Jan 2009 09:26 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Interesting idea, but:
- I have 2GB but its mostly unused according to htop.
- And there are two parallel proxies, same hw/os/havp version. Both segfault.

Author:  karesmakro [ 14 Jan 2009 15:29 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

Quote:
I've upgraded from Ubuntu 7.10 to 8.04, and thus also the clamav libraries.
No segfaults so far...


Did you recompiled the havp package after upgrading clamav 0.94.2? This is very important!

Author:  boran [ 15 Jan 2009 17:47 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

No, and that makes sense. I'll post back after re-compiling and letting it run for a few days.

Author:  boran [ 20 Jan 2009 09:19 ]
Post subject:  Re: havp[23572]: segfault at 0000000000000010 rip 000000000806a7

The segfaults have started again, although its seems less frequent. Each message happens grouped 3-4 times

Quote:
07:17 proxy2 kernel: [4212750.661286] havp[23181]: segfault at 0000000c eip 0806c5fc esp bfd1cb10 error 4 ..
10:34 proxy1 kernel: [3613461.911941] havp[15878]: segfault at 14 rip 424528 rsp 7fff1e186c00 error 4
..
13:45 proxy2 kernel: [4235987.892496] havp[25228]: segfault at 0000000c eip 0806c5fc esp bfd1cb10 error 4
..

Page 1 of 2 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/