Comments (12)
danielloader
commented on June 15, 2024
1
Nailed it. Thank you very much!
from dnsmonster.
mosajjal
commented on June 15, 2024
1
excellent :)
from dnsmonster.
mosajjal
commented on June 15, 2024
1
metrics should be accurate to the number of packets inside the pcap file. in your shot it looks like there's inaccuracy. let's open a new issue for that and track it separately
from dnsmonster.
danielloader
commented on June 15, 2024
Similarly, noticed the solution in the piping pcap file issue:
zcat "dns_trace_2022-03-26_23 59 01.pcap.gz" | tcprewrite --dlt=enet --infile=/dev/stdin --outfile=/dev/stdout | dnsmonster --pcapfile=/dev/stdin --stdoutOutputType=1
Tried this and got the same idling behaviour.
from dnsmonster.
mosajjal
commented on June 15, 2024
Hey mate. can you please test against v0.9.6. I'd be happy to take a look if the latest version still has the same issue.
from dnsmonster.
danielloader
commented on June 15, 2024
Thanks just tried v0.9.6 and no change in behaviour.
Edit: Noticed there's a debug log level thinking it might help but doesn't seem to add much (with a ctrl-c to exit):
$ dnsmonster --pcapfile="output.pcap" --fileoutputpath=dns.json --fileoutputformat=json --fileoutputtype=1 --loglevel=4
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/outputs.go:24 main.setupOutputs() Creating the dispatch Channel
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/output/file.go:46 github.com/mosajjal/dnsmonster/output.fileConfig.Initialize() Creating File Output Channel
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/capture/pcapfile.go:31 github.com/mosajjal/dnsmonster/capture.initializeOfflinePcap() Using File: output.pcap
WARN[2022-11-05T20:17:10Z]/opt/dnsmonster/capture/pcapfile.go:32 github.com/mosajjal/dnsmonster/capture.initializeOfflinePcap() BPF Filter is not supported in offline mode.
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/capture/nondnstap.go:32 github.com/mosajjal/dnsmonster/capture.captureConfig.StartNonDNSTap() Reading off Pcap file
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/outputs.go:45 main.setupOutputs() skipping skipDomains refresh since it's not provided
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/capture/packet.go:148 github.com/mosajjal/dnsmonster/capture.captureConfig.StartPacketDecoder() Creating handler #0
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/capture/packet.go:148 github.com/mosajjal/dnsmonster/capture.captureConfig.StartPacketDecoder() Creating handler #1
INFO[2022-11-05T20:17:10Z]/opt/dnsmonster/outputs.go:54 main.setupOutputs() skipping allowDomains refresh since it's not provided
2022-11-05T20:17:20Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:17:30Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:17:40Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:17:50Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:18:00Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:18:10Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:18:20Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
^CINFO[2022-11-05T20:18:27Z]/opt/dnsmonster/main.go:37 main.handleInterrupt.func1() SIGINT Received. Stopping capture...
DEBU[2022-11-05T20:18:27Z]/opt/dnsmonster/outputs.go:75 main.setupOutputs.func1() exitting out of output dispatcher
DEBU[2022-11-05T20:18:27Z]/opt/dnsmonster/capture/nondnstap.go:62 github.com/mosajjal/dnsmonster/capture.captureConfig.StartNonDNSTap.func1() exitting out of metric update goroutine
metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
DEBU[2022-11-05T20:18:27Z]/opt/dnsmonster/capture/defrag.go:295 github.com/mosajjal/dnsmonster/capture.ipv4Defragger() exitting out of ipv4 goroutine
from dnsmonster.
danielloader
commented on June 15, 2024
Tried again with strace hoping anything here helps!
$ strace -r dnsmonster --pcapfile="output.pcap" --fileoutputpath=dns.json --fileoutputformat=json --fileoutputtype=1 --loglevel=4
0.000000 execve("/usr/local/bin/dnsmonster", ["dnsmonster", "--pcapfile=output.pcap", "--fileoutputpath=dns.json", "--fileoutputformat=json", "--fileoutputtype=1", "--loglevel=4"], 0x7ffea0460c90 /* 23 vars */) = 0
0.001695 arch_prctl(ARCH_SET_FS, 0x219f8a0) = 0
0.000426 set_tid_address(0x219f9d0) = 73838
0.000465 brk(NULL) = 0x2e1b000
0.000265 brk(0x2e1d000) = 0x2e1d000
0.000187 mmap(0x2e1b000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2e1b000
0.000324 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc69415000
0.000373 munmap(0x7efc69415000, 4096) = 0
0.000396 sched_getaffinity(0, 8192, [0, 1, 2, 3, 4, 5, 6, 7]) = 8
0.000301 openat(AT_FDCWD, "/sys/kernel/mm/transparent_hugepage/hpage_pmd_size", O_RDONLY) = 3
0.000402 read(3, "2097152\n", 20) = 8
0.000190 close(3) = 0
0.000504 mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc693d6000
0.000204 mmap(NULL, 131072, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc693b6000
0.000125 mmap(NULL, 1048576, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc692b6000
0.000091 mmap(NULL, 8388608, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc68ab6000
0.000068 mmap(NULL, 67108864, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc64ab6000
0.000070 mmap(NULL, 536870912, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc44ab6000
0.000074 mmap(NULL, 8388608, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc442b6000
0.000151 mmap(0xc000000000, 67108864, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
0.000087 mmap(NULL, 33554432, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc422b6000
0.000107 mmap(NULL, 2165776, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc420a5000
0.000120 mmap(0xc000000000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000000000
0.000108 mmap(0x7efc693b6000, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc693b6000
0.000088 mmap(0x7efc69336000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc69336000
0.000085 mmap(0x7efc68ebc000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc68ebc000
0.000094 mmap(0x7efc66ae6000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc66ae6000
0.000087 mmap(0x7efc54c36000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc54c36000
0.000093 mmap(0x7efc442b6000, 4222976, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7efc442b6000
0.000085 madvise(0x7efc44400000, 2097152, MADV_HUGEPAGE) = 0
0.000103 mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41fa5000
0.000209 mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f95000
0.000132 mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f85000
0.001035 mmap(NULL, 89574, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f6f000
0.001347 rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
0.000401 sigaltstack(NULL, {ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=0}) = 0
0.000122 sigaltstack({ss_sp=0xc000008000, ss_flags=0, ss_size=32768}, NULL) = 0
0.000196 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000108 gettid() = 73838
0.000172 rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000120 rt_sigprocmask(SIG_UNBLOCK, [RT_1 RT_2], NULL, 8) = 0
0.000080 rt_sigaction(SIGHUP, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000089 rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000070 rt_sigaction(SIGINT, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000080 rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000085 rt_sigaction(SIGQUIT, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000085 rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000086 rt_sigaction(SIGILL, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000081 rt_sigaction(SIGTRAP, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000078 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
0.000089 rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000084 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
0.000088 rt_sigaction(SIGABRT, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000090 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000084 rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000089 rt_sigaction(SIGBUS, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000088 rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGFPE, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000090 rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000089 rt_sigaction(SIGUSR1, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000097 rt_sigaction(SIGSEGV, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000089 rt_sigaction(SIGUSR2, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGPIPE, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGALRM, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000090 rt_sigaction(SIGTERM, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGSTKFLT, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGCHLD, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000088 rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGURG, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000090 rt_sigaction(SIGXCPU, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGXFSZ, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGVTALRM, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGPROF, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000084 rt_sigaction(SIGWINCH, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000084 rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000086 rt_sigaction(SIGIO, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000082 rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGPWR, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGSYS, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGRTMIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000104 rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000090 rt_sigaction(SIGRT_3, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000088 rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000089 rt_sigaction(SIGRT_4, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_5, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_6, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_7, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_8, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000085 rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000081 rt_sigaction(SIGRT_9, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000078 rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000076 rt_sigaction(SIGRT_10, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000075 rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000083 rt_sigaction(SIGRT_11, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000076 rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000081 rt_sigaction(SIGRT_12, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000084 rt_sigaction(SIGRT_13, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000083 rt_sigaction(SIGRT_14, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000090 rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000084 rt_sigaction(SIGRT_15, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGRT_16, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_17, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000090 rt_sigaction(SIGRT_18, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000088 rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_19, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_20, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000088 rt_sigaction(SIGRT_21, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGRT_22, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000085 rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000084 rt_sigaction(SIGRT_23, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000086 rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000085 rt_sigaction(SIGRT_24, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000086 rt_sigaction(SIGRT_25, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000095 rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000089 rt_sigaction(SIGRT_26, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000080 rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000076 rt_sigaction(SIGRT_27, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000083 rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000085 rt_sigaction(SIGRT_28, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000088 rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000086 rt_sigaction(SIGRT_29, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000085 rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000086 rt_sigaction(SIGRT_30, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000079 rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGRT_31, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000087 rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
0.000087 rt_sigaction(SIGRT_32, {sa_handler=0x470dc0, sa_mask=~[RTMIN RT_1 RT_2], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0xf7fbfc}, NULL, 8) = 0
0.000127 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f6e000
0.000114 rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1 RT_2], [], 8) = 0
0.000106 rt_sigprocmask(SIG_UNBLOCK, [RT_1 RT_2], NULL, 8) = 0
0.000083 mmap(NULL, 143360, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f4b000
0.000091 mprotect(0x7efc41f4d000, 135168, PROT_READ|PROT_WRITE) = 0
0.000098 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1 RT_2], ~[KILL STOP RTMIN RT_1 RT_2], 8) = 0
0.000094 clone(child_stack=0x7efc41f6dee8, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID|0x400000, parent_tid=[73839], tls=0x7efc41f6df38, child_tidptr=0x219f9d0) = 73839
0.000169 rt_sigprocmask(SIG_SETMASK, ~[KILL STOP RTMIN RT_1 RT_2], NULL, 8) = 0
0.000088 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000086 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000055 rt_sigreturn({mask=[]}) = 0
0.000101 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000044 rt_sigreturn({mask=[]}) = 0
0.000079 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000047 rt_sigreturn({mask=[]}) = 0
0.000082 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000046 rt_sigreturn({mask=[]}) = 0
0.000078 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000044 rt_sigreturn({mask=[]}) = 0
0.000083 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000047 rt_sigreturn({mask=[]}) = 824634197880
0.000078 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000042 rt_sigreturn({mask=[]}) = 824634197880
0.000085 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000047 rt_sigreturn({mask=[]}) = 824634197880
0.000082 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000046 rt_sigreturn({mask=[]}) = 824634197880
0.000078 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000046 rt_sigreturn({mask=[]}) = 824634197880
0.000083 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000043 rt_sigreturn({mask=[]}) = 824634197880
0.000079 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000047 rt_sigreturn({mask=[]}) = 824634197880
0.000079 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000046 rt_sigreturn({mask=[]}) = 824634197880
0.000080 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000048 rt_sigreturn({mask=[]}) = 824634197880
0.000132 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000059 rt_sigreturn({mask=[]}) = 824634197880
0.000100 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000055 rt_sigreturn({mask=[]}) = 824634197880
0.000090 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000052 rt_sigreturn({mask=[]}) = 824634197880
0.000091 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000052 rt_sigreturn({mask=[]}) = 824634197880
0.000087 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000052 rt_sigreturn({mask=[]}) = 824634197880
0.000089 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824634197880
0.000085 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000052 rt_sigreturn({mask=[]}) = 824634197880
0.000086 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824634197880
0.000094 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000088 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000089 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000088 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000087 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000087 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000086 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000051 rt_sigreturn({mask=[]}) = 824633745824
0.000085 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000049 rt_sigreturn({mask=[]}) = 824633745824
0.000086 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000049 rt_sigreturn({mask=[]}) = 824633745824
0.000085 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000049 rt_sigreturn({mask=[]}) = 824633745824
0.000084 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000050 rt_sigreturn({mask=[]}) = 824633745824
0.000109 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f6e000
0.000126 rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1 RT_2], [], 8) = 0
0.000104 mmap(NULL, 143360, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f28000
0.000092 mprotect(0x7efc41f2a000, 135168, PROT_READ|PROT_WRITE) = 0
0.000106 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1 RT_2], ~[KILL STOP RTMIN RT_1 RT_2], 8) = 0
0.000103 clone(child_stack=0x7efc41f4aee8, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID|0x400000, parent_tid=[73840], tls=0x7efc41f4af38, child_tidptr=0x219f9d0) = 73840
0.000154 rt_sigprocmask(SIG_SETMASK, ~[KILL STOP RTMIN RT_1 RT_2], NULL, 8) = 0
0.000092 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000175 mmap(NULL, 1439992, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41dc8000
0.000116 mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41d88000
0.000139 futex(0xc000078948, FUTEX_WAKE_PRIVATE, 1) = 1
0.000158 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f6e000
0.000118 futex(0x219eec0, FUTEX_WAKE_PRIVATE, 1) = 1
0.000086 rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1 RT_2], [], 8) = 0
0.000104 mmap(NULL, 143360, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41d02000
0.000102 mprotect(0x7efc41d04000, 135168, PROT_READ|PROT_WRITE) = 0
0.000104 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1 RT_2], ~[KILL STOP RTMIN RT_1 RT_2], 8) = 0
0.000106 clone(child_stack=0x7efc41d24ee8, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID|0x400000, parent_tid=[73842], tls=0x7efc41d24f38, child_tidptr=0x219f9d0) = 73842
0.000158 rt_sigprocmask(SIG_SETMASK, ~[KILL STOP RTMIN RT_1 RT_2], NULL, 8) = 0
0.000092 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000114 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41f6e000
0.000121 rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1 RT_2], [], 8) = 0
0.000103 mmap(NULL, 143360, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41c9f000
0.000091 mprotect(0x7efc41ca1000, 135168, PROT_READ|PROT_WRITE) = 0
0.000097 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1 RT_2], ~[KILL STOP RTMIN RT_1 RT_2], 8) = 0
0.000102 clone(child_stack=0x7efc41cc1ee8, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID|0x400000, parent_tid=[73843], tls=0x7efc41cc1f38, child_tidptr=0x219f9d0) = 73843
0.000161 rt_sigprocmask(SIG_SETMASK, ~[KILL STOP RTMIN RT_1 RT_2], NULL, 8) = 0
0.000091 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
0.000432 fcntl(0, F_GETFL) = 0x2 (flags O_RDWR)
0.000122 futex(0xc000078d48, FUTEX_WAKE_PRIVATE, 1) = 1
0.000095 fcntl(1, F_GETFL) = 0x2 (flags O_RDWR)
0.000088 fcntl(2, F_GETFL) = 0x2 (flags O_RDWR)
0.000089 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024*1024}) = 0
0.000106 setrlimit(RLIMIT_NOFILE, {rlim_cur=1024*1024, rlim_max=1024*1024}) = 0
0.011830 newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
0.000130 newfstatat(AT_FDCWD, "/home/loaderd", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
0.002195 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, 0, 0) = 0x7efc41f6e000
0.000110 mprotect(0x7efc41f6e000, 4096, PROT_READ|PROT_EXEC) = 0
0.000104 readlinkat(AT_FDCWD, "/proc/self/exe", "/usr/local/bin/dnsmonster", 128) = 25
0.000105 openat(AT_FDCWD, "/usr/local/bin/dnsmonster", O_RDONLY|O_CLOEXEC) = 3
0.000079 epoll_create1(EPOLL_CLOEXEC) = 4
0.000060 pipe2([5, 6], O_NONBLOCK|O_CLOEXEC) = 0
0.000070 epoll_ctl(4, EPOLL_CTL_ADD, 5, {EPOLLIN, {u32=35259896, u64=35259896}}) = 0
0.000079 epoll_ctl(4, EPOLL_CTL_ADD, 3, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=1104548888, u64=139621901407256}}) = -1 EPERM (Operation not permitted)
0.000212 fstat(3, {st_mode=S_IFREG|0755, st_size=25326552, ...}) = 0
0.000070 pread64(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\2\0>\0\1\0\0\0G\20@\0\0\0\0\0"..., 64, 0) = 64
0.000066 pread64(3, "H\213\204$\30\1\0\0\350\30F\377\377H\205\311\17\205\344\0\0\0H\215\r\250\236\230\0H9\310"..., 64, 3165819) = 64
0.000065 pread64(3, "\211L\215l$(\17\37@\0M9,$u\227I\211$$\353\221\314\314\314\314\314\314\314\314\314\314"..., 64, 6331638) = 64
0.000064 pread64(3, "L\0\350\250jp\377H\213\204$\240\0\0\0H\213\214$\360\0\0\0H\211\210\350\0\0\0\203="..., 64, 9497457) = 64
0.000059 pread64(3, "\0\0\0\0\0}\5\1\0\0\0\0\0\0\0\0\0\0\0\0\30\0\0\0\0\0\0\0\10\0\0\0"..., 64, 12663276) = 64
0.000060 pread64(3, "\0c\1\0\0\377\377\0\0G\0\0\0\25\0\0\0\220\310\0\0\255\1\0\0\377\377\0\0G\0\0"..., 64, 15829095) = 64
0.000061 pread64(3, "\21\252\7\5\251\7\5\252\7\5\221\6\2\227\1\5\230\1\4\227\1\32\232\1\2\1\2\30\16\24\v\r"..., 64, 18994914) = 64
0.000060 pread64(3, "\21\7\0dh\0\0000i\0\0\0004\3\0\377\377\377\377\377\377\377\377y\0\0\0E\0\0\0\0"..., 64, 22160733) = 64
0.000061 close(3) = 0
0.001171 futex(0xc0000a0148, FUTEX_WAKE_PRIVATE, 1) = 1
0.000060 --- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=73838, si_uid=1000} ---
0.000034 rt_sigreturn({mask=[]}) = 1
0.000378 getpid() = 73838
0.000064 newfstatat(AT_FDCWD, "/proc", {st_mode=S_IFDIR|0555, st_size=0, ...}, 0) = 0
0.000098 futex(0xc0000a0148, FUTEX_WAKE_PRIVATE, 1) = 1
0.000050 futex(0xc000078d48, FUTEX_WAKE_PRIVATE, 1) = 1
0.000134 futex(0xc000078d48, FUTEX_WAKE_PRIVATE, 1) = 1
0.000049 futex(0xc000078948, FUTEX_WAKE_PRIVATE, 1) = 1
0.000059 futex(0xc000078948, FUTEX_WAKE_PRIVATE, 1) = 1
0.000058 futex(0xc000078948, FUTEX_WAKE_PRIVATE, 1) = 1
0.000091 futex(0xc000078948, FUTEX_WAKE_PRIVATE, 1) = 1
0.000685 mmap(0xc000400000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000400000
0.002694 uname({sysname="Linux", nodename="kvmhost", ...}) = 0
0.000776 mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc41c5f000
0.003356 uname({sysname="Linux", nodename="kvmhost", ...}) = 0
0.000271 getrandom("\x5b\xa3\x57\xa5\xe0\xa9\x5c\xe0\x34\xeb\xef\x43\x82\x2c\x28\x2e\x46\x28\x22\x1a\x63\xfe\x2f\x19", 24, 0) = 24
0.000526 futex(0xc0000a0148, FUTEX_WAKE_PRIVATE, 1) = 1
0.000059 rt_sigprocmask(SIG_SETMASK, ~[HUP INT QUIT ILL TRAP ABRT BUS FPE SEGV TERM STKFLT CHLD URG PROF SYS RTMIN RT_1 RT_2], NULL, 8) = 0
0.000050 rt_sigprocmask(SIG_SETMASK, ~[HUP INT QUIT ILL TRAP ABRT BUS FPE SEGV TERM STKFLT CHLD URG PROF SYS RTMIN RT_1 RT_2], NULL, 8) = 0
0.000043 futex(0x21a0d58, FUTEX_WAKE_PRIVATE, 1) = 1
0.000041 futex(0x1c31ce8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
0.000176 futex(0xc000079148, FUTEX_WAKE_PRIVATE, 1) = 1
0.000038 rt_sigprocmask(SIG_SETMASK, ~[HUP INT QUIT ILL TRAP ABRT BUS FPE SEGV PIPE TERM STKFLT CHLD URG PROF SYS RTMIN RT_1 RT_2], NULL, 8) = 0
0.000040 futex(0xc000078d48, FUTEX_WAKE_PRIVATE, 1) = 1
0.000038 futex(0x1c31ce8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
0.000089 futex(0x1c31ce8, FUTEX_WAIT_PRIVATE, 0, NULLINFO[2022-11-05T20:25:37Z]/opt/dnsmonster/outputs.go:24 main.setupOutputs() Creating the dispatch Channel
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/output/file.go:46 github.com/mosajjal/dnsmonster/output.fileConfig.Initialize() Creating File Output Channel
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/outputs.go:45 main.setupOutputs() skipping skipDomains refresh since it's not provided
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/capture/packet.go:148 github.com/mosajjal/dnsmonster/capture.captureConfig.StartPacketDecoder() Creating handler #0
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/outputs.go:54 main.setupOutputs() skipping allowDomains refresh since it's not provided
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/capture/pcapfile.go:31 github.com/mosajjal/dnsmonster/capture.initializeOfflinePcap() Using File: output.pcap
WARN[2022-11-05T20:25:37Z]/opt/dnsmonster/capture/pcapfile.go:32 github.com/mosajjal/dnsmonster/capture.initializeOfflinePcap() BPF Filter is not supported in offline mode.
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/capture/packet.go:148 github.com/mosajjal/dnsmonster/capture.captureConfig.StartPacketDecoder() Creating handler #1
INFO[2022-11-05T20:25:37Z]/opt/dnsmonster/capture/nondnstap.go:32 github.com/mosajjal/dnsmonster/capture.captureConfig.StartNonDNSTap() Reading off Pcap file
2022-11-05T20:25:47Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:25:57Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:26:07Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:26:17Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:26:27Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
2022-11-05T20:26:37Z metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
^Cstrace: Process 73838 detached
<detached ...>
INFO[2022-11-05T20:26:38Z]/opt/dnsmonster/main.go:37 main.handleInterrupt.func1() SIGINT Received. Stopping capture...
DEBU[2022-11-05T20:26:38Z]/opt/dnsmonster/outputs.go:75 main.setupOutputs.func1() exitting out of output dispatcher
DEBU[2022-11-05T20:26:38Z]/opt/dnsmonster/capture/defrag.go:295 github.com/mosajjal/dnsmonster/capture.ipv4Defragger() exitting out of ipv4 goroutine
metrics: {"fileSentToOutput":{"count":136405},"fileSkipped":{"count":0},"packetLossPercent":{"value":0},"packetsCaptured":{"value":0},"packetsDropped":{"value":0},"packetsDuplicate":{"count":0},"packetsOverRatio":{"count":0}}
DEBU[2022-11-05T20:26:38Z]/opt/dnsmonster/capture/nondnstap.go:62 github.com/mosajjal/dnsmonster/capture.captureConfig.StartNonDNSTap.func1() exitting out of metric update goroutine
from dnsmonster.
danielloader
commented on June 15, 2024
Even tried to rule out my local golang compile chain with docker:
docker run --rm -it -v $PWD/output.pcap:/data/output.pcap --name dnsmonster ghcr.io/mosajjal/dnsmonster:latest --pcapfile=/data/output.pcap --stdoutOutputType=1
Same behaviour.
from dnsmonster.
mosajjal
commented on June 15, 2024
I think I narrowed down the problem to pcap files with TCP streams in them. Does your pcap also have TCP streams?
from dnsmonster.
danielloader
commented on June 15, 2024
Good assumption. Yes they include TCP connections due to the 512 byte limit on larger responses.
from dnsmonster.
mosajjal
commented on June 15, 2024
just pushed a fix to a race condition issue. can you please check to see if that solves the problem
from dnsmonster.
danielloader
commented on June 15, 2024
One last thing, guessing the packetsCaptured metric related to a single pcap file rather than the packets in the file?
from dnsmonster.
Related Issues (20)
- Potentially inaccurate packet count when reading from pcap file HOT 6
- Compilation failed on MacOS M1 HOT 1
- PCAP to JSON workflow - Split/maximum packets per output file?
- File output supporting compression HOT 2
- support for Parquet format output HOT 1
- (Illegal type DateTime64(3) [ while pushing to view default.DNS_PROTOCOL] Latest Version(v0.9.7) DNS-Monster Showing Error while send data to Click-House HOT 9
- How to do Multiple ClickHouse Ip address entry into Dnsmonster configuration file HOT 2
- how to make dns-monster listen multiple ports HOT 2
- Clickhouse Cloud HOT 3
- Decrypting DoT / DoH sessions via passive DNS approach itself HOT 1
- Clickhouse flushing algo HOT 2
- Clickhouse schema weirdness HOT 2
- Save dnstap `identity` as server name HOT 6
- Warning Error While logging data on DNStap socket to Click-House HOT 3
- Not logged all data from Interface Device HOT 5
- can dnsmonster handle 5,000,000 QPS? HOT 4
- Feature Request: support Kafka SASL_PLAINTEXT Protocol HOT 1
- Found wrong sql in grafana example panel.json HOT 2
- Collecting TCP RTT durring handshake HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dnsmonster.