[Lognorm] Is liblognorm ( libee, libestr, etc) thread safe?

Champ Clark III cclark at quadrantsec.com
Fri May 4 22:37:16 CEST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Argh - sorry to bombard the list!  I should point out,  this is after
about 10/15 minutes of running.  It's not a immediate seg fault.


On 5/4/12 4:35 PM, Champ Clark III wrote:
> Just tried it with/without mutexs,  and this happens.
> 
> [Switching to Thread 0xb6355b70 (LWP 4226)] ee_getBucketField
> (bucket=0xb42106f8, name=0xb4210458) at fieldbucket.c:112 112
> if(!es_strcmp(name, node->field->name)) (gdb) bt #0
> ee_getBucketField (bucket=0xb42106f8, name=0xb4210458) at 
> fieldbucket.c:112 #1  0xb7f00a62 in ee_getEventField
> (event=0xb4210408, name=0xb4210458) at event.c:175 #2  0xb7ff07f8
> in sagan_normalize_liblognorm (config=0xb8015038, 
> debug=0xb8015028, syslog_msg=0xb80165a4 " error (unexpected RCODE
> REFUSED) resolving '180.70.7.107.in-addr.arpa/PTR/IN':
> 72.243.168.246#53") at sagan-liblognorm.c:127 #3  0xb7ffaedd in
> sagan_websense (SyslogPthread=0xb8016420) at 
> preprocessors/sagan-websense.c:63 #4  0xb7ff06aa in
> sagan_preprocessor (SyslogPthread=0xb8016420) at 
> sagan-preprocessor.c:45 #5  0xb7bcecf2 in start_thread () from
> /lib/libpthread.so.0 #6  0xb7afae0e in clone () from
> /lib/libc.so.6
> 
> 
> On 5/4/12 4:16 PM, Champ Clark III wrote:
> 
>> Does anyone know if liblognorm (and the associated libs) are 
>> considered "thread" safe.  I need to move some normalization to a
>>  pthread,  and was just curious.   Any pointers would be great.
> 
>> _______________________________________________ Lognorm mailing 
>> list Lognorm at lists.adiscon.com 
>> http://lists.adiscon.net/mailman/listinfo/lognorm
> 
> _______________________________________________ Lognorm mailing
> list Lognorm at lists.adiscon.com 
> http://lists.adiscon.net/mailman/listinfo/lognorm

- -- 
- - Champ Clark III (cclark at quadrantsec.com)
  Quadrant Information Security (http://quadrantsec.com)
  Key Fingerprint: 2E56 C2EB 1B25 C517 D5BA 2DCF 5E70 B2F8 0381 878A
  GPG Key ID: 0381878A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPpD38AAoJENnmXt7Lmc3KASQH/iVEhjA/QubLroUmEL+33ED2
Ja0DlV0TMt72CVFdcA10OonT74g9OzqitGCCbDkZxgC/uxtzZFqDoyIgSyfV4CVc
+A2dGF6dOXFJAKQqJt5Keq1Vy2uC9fIJ8zjMlgMrJer1Y4dwwOQc//ATL6tE2KS+
A0P8+8ys1j1qyooIMzJmKFkGuvG88rxIoivwVEj3/yXD643ulN6GnUimpJuWfSUS
qOC4mXcCnj34aDFRfGWOXvF4UiG9dhKfTay7QCosMcj6uojrS/AGO7hcTTGWPSsz
g/2jjv7ekwoQCquorU9dMndirqUYUP+S4GcnRByJYkwtsJbFeubP73avGV0dHKI=
=L7zu
-----END PGP SIGNATURE-----


More information about the Lognorm mailing list