[Lognorm] Is liblognorm ( libee, libestr, etc) thread safe?
Champ Clark III
cclark at quadrantsec.com
Fri May 4 22:37:16 CEST 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Argh - sorry to bombard the list! I should point out, this is after
about 10/15 minutes of running. It's not a immediate seg fault.
On 5/4/12 4:35 PM, Champ Clark III wrote:
> Just tried it with/without mutexs, and this happens.
>
> [Switching to Thread 0xb6355b70 (LWP 4226)] ee_getBucketField
> (bucket=0xb42106f8, name=0xb4210458) at fieldbucket.c:112 112
> if(!es_strcmp(name, node->field->name)) (gdb) bt #0
> ee_getBucketField (bucket=0xb42106f8, name=0xb4210458) at
> fieldbucket.c:112 #1 0xb7f00a62 in ee_getEventField
> (event=0xb4210408, name=0xb4210458) at event.c:175 #2 0xb7ff07f8
> in sagan_normalize_liblognorm (config=0xb8015038,
> debug=0xb8015028, syslog_msg=0xb80165a4 " error (unexpected RCODE
> REFUSED) resolving '180.70.7.107.in-addr.arpa/PTR/IN':
> 72.243.168.246#53") at sagan-liblognorm.c:127 #3 0xb7ffaedd in
> sagan_websense (SyslogPthread=0xb8016420) at
> preprocessors/sagan-websense.c:63 #4 0xb7ff06aa in
> sagan_preprocessor (SyslogPthread=0xb8016420) at
> sagan-preprocessor.c:45 #5 0xb7bcecf2 in start_thread () from
> /lib/libpthread.so.0 #6 0xb7afae0e in clone () from
> /lib/libc.so.6
>
>
> On 5/4/12 4:16 PM, Champ Clark III wrote:
>
>> Does anyone know if liblognorm (and the associated libs) are
>> considered "thread" safe. I need to move some normalization to a
>> pthread, and was just curious. Any pointers would be great.
>
>> _______________________________________________ Lognorm mailing
>> list Lognorm at lists.adiscon.com
>> http://lists.adiscon.net/mailman/listinfo/lognorm
>
> _______________________________________________ Lognorm mailing
> list Lognorm at lists.adiscon.com
> http://lists.adiscon.net/mailman/listinfo/lognorm
- --
- - Champ Clark III (cclark at quadrantsec.com)
Quadrant Information Security (http://quadrantsec.com)
Key Fingerprint: 2E56 C2EB 1B25 C517 D5BA 2DCF 5E70 B2F8 0381 878A
GPG Key ID: 0381878A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQEcBAEBAgAGBQJPpD38AAoJENnmXt7Lmc3KASQH/iVEhjA/QubLroUmEL+33ED2
Ja0DlV0TMt72CVFdcA10OonT74g9OzqitGCCbDkZxgC/uxtzZFqDoyIgSyfV4CVc
+A2dGF6dOXFJAKQqJt5Keq1Vy2uC9fIJ8zjMlgMrJer1Y4dwwOQc//ATL6tE2KS+
A0P8+8ys1j1qyooIMzJmKFkGuvG88rxIoivwVEj3/yXD643ulN6GnUimpJuWfSUS
qOC4mXcCnj34aDFRfGWOXvF4UiG9dhKfTay7QCosMcj6uojrS/AGO7hcTTGWPSsz
g/2jjv7ekwoQCquorU9dMndirqUYUP+S4GcnRByJYkwtsJbFeubP73avGV0dHKI=
=L7zu
-----END PGP SIGNATURE-----
More information about the Lognorm
mailing list