sngrep icon indicating copy to clipboard operation
sngrep copied to clipboard

Published 20 hours ago • verified publisher icon irontec

illegal hardware instruction when read pcap

Open wangduanduan opened this issue 3 years ago • 4 comments

system info: macOs 12.2

sngrep - 1.4.10
Copyright (C) 2013-2018 Irontec S.L.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by Ivan Alonso [aka Kaian]

when read pcap file

sngrep -I 1.pcap

and get error, sngrep crashed

[1]    6353 illegal hardware instruction  sngrep -I 1.pcap

wangduanduan avatar Mar 29 '22 12:03 wangduanduan

Hi @wangduanduan

Can you provide a pcap that causes the crash? It helps a lot.

Thanks!

Kaian avatar Mar 29 '22 15:03 Kaian

the 1.pcap file maybe has some problems, when read some others pcap, sngrep work correctly.

but wireshark can read the 1.pcap correctly, after see all packets in wireshark, i find all udp packet duplicate, include sip and rtp.

1.pcap.zip @Kaian

wangduanduan avatar Mar 30 '22 01:03 wangduanduan

Hi,

Thanks for the test file.

I have tested this in some GNU/Linux enviroments without crash, so it looks related to macOS only.

Sadly I have no Mac available, so I cann't debug this properly.

Can this problem be reproduced with previous sngrep versions?

Thanks for the info

Kaian avatar Apr 06 '22 09:04 Kaian