AnsweredAssumed Answered

Lua parsers causing decoder issues

Question asked by Scott Smith on Dec 10, 2013
Latest reply on Dec 12, 2013 by RSA Admin

Has anybody had any issues with their decoder service having issues after switching to lua parsers.  I'm seeing entries in the logs where a core dump occurs (no space to store the coredump) and the decoder service restarts.  I didn't notice this until I checked the logs for something else and saw these entries.  What is interesting is that almost all of our decoders have this issue around the same time (within 10 minutes of each other).

 

Dec 10 00:56:11 decoder1 abrt[3850]: write error: No space left on device

Dec 10 00:56:11 decoder1 abrt[3850]: error writing /var/spool/abrt/ccpp-2013-12-10-00:53:18-2229.new/coredump

Dec 10 00:52:58 decoder1 kernel: device p3p2 left promiscuous mode

Dec 10 00:52:58 decoder1 kernel: device p3p1 left promiscuous mode

Dec 10 00:52:58 decoder1 kernel: device em4 left promiscuous mode

Dec 10 00:52:58 decoder1 kernel: device em3 left promiscuous mode

Dec 10 00:52:58 decoder1 kernel: device em2 left promiscuous mode

Dec 10 00:52:58 decoder1 init: nwdecoder main process (10723) killed by SEGV signal

Dec 10 00:52:58 decoder1 init: nwdecoder main process ended, respawning

Outcomes