Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fatal Error: poll() timeout... tcpdump seems to be having a problem keeping up #398

Closed
TangMonk opened this issue May 26, 2017 · 7 comments
Closed

Fatal Error: poll() timeout... tcpdump seems to be having a problem keeping up #398

TangMonk opened this issue May 26, 2017 · 7 comments
Assignees
@fklassen
Labels
bug

Comments

@TangMonk
Copy link 

$ sudo tcpreplay -v  --intf1=en0 /Users/tangmonk/Downloads/3.pcap
<�'Y°��V
d/�
��V)Evl@@�G�r�E��P�J��	��P ��GET / HTTP/1.1
Host: 114.215.69.217
User-Agent: curl/7.43.0
Accept: */*


Fatal Error:
poll() timeout... tcpdump seems to be having a problem keeping up
Try increasing TCPDUMP_POLL_TIMEOUT

this is my pcap file: https://www.dropbox.com/s/gcqdgn4rbwcax62/3.pcap?dl=0

sudo tcpreplay -V
tcpreplay version: 4.2.6 (build git:v4.2.6)
Copyright 2013-2017 by Fred Klassen <tcpreplay at appneta dot com> - AppNeta
Copyright 2000-2012 by Aaron Turner <aturner at synfin dot net>
The entire Tcpreplay Suite is licensed under the GPLv3
Cache file supported: 04
Compiled against libdnet: 1.12
Compiled against libpcap: 1.3.0
64 bit packet counters: enabled
Verbose printing via tcpdump: enabled
Packet editing: disabled
Fragroute engine: enabled
Injection method: bpf send()
Not compiled with netmap
@fklassen fklassen self-assigned this May 26, 2017
@fklassen fklassen added the bug label May 26, 2017
@fklassen
Copy link
Member

This is a long-standing bug from before I took over the project. If I understand the history, changes in tcpdump brought on this error. I'll investigate for 4.2.7.

@fklassen
Copy link
Member

3.pcap.txt

@sadir
Copy link

sadir commented Jul 27, 2017

Hi @fklassen! Any updates on this? I've just started playing with tcpreplay and I'm stumbling across this error.

@fklassen
Copy link
Member

I had a quick look, and am concerned about comments from the previous maintainer. It appears that a fix has been attempted, but failed.

I have a backlog of bugs that need lots of testing and am deferring to Sept. We have a code freeze going on right now as we are attempting to get a higher level of stability for current and upcoming Debian/Ubuntu releases. Once stability is achieved, we plan to dig into these tougher issues.

@sadir
Copy link

sadir commented Jul 27, 2017

Thank you for the quick reply and concise, clear answer! I won't chase any further but do please update as and when you have something to share.

fklassen added a commit that referenced this issue Jan 25, 2018
@fklassen
Bug #398 Rewrite of tcpdump.c
ad3cb32 
Reworked how `tcpdump` picks up STDIN/STDOUT pipes. Converted from
old-style socket pairs to modern `pipe` structures.

Found that on 64-bit machines, `struct pcap_pkthdr` is not the same
size as the similar array in the actual PCAP file. Added a new
structure to compensate.

Reworked `poll`, `write` and `read` to make them more robust.

Works on Linux. Still haveing some issues on macOS.
fklassen added a commit that referenced this issue Jan 25, 2018
@fklassen
#398 correct timestamp used byt tcpdump
871842b
fklassen added a commit that referenced this issue Jan 25, 2018
@fklassen
#398 correct debug message
61e6300
fklassen added a commit that referenced this issue Jan 25, 2018
@fklassen
#398 fix data alignment issue
2252b7e
fklassen added a commit that referenced this issue Jan 25, 2018
@fklassen
#398 update CHANGLOG [ci skip]
e39cd1c
fklassen added a commit that referenced this issue Jan 25, 2018
@fklassen
Bug #398 Rewrite of tcpdump.c (#457)
e8fe925 
* Bug #398 Rewrite of tcpdump.c

Reworked how `tcpdump` picks up STDIN/STDOUT pipes. Converted from
old-style socket pairs to modern `pipe` structures.

Found that on 64-bit machines, `struct pcap_pkthdr` is not the same
size as the similar array in the actual PCAP file. Added a new
structure to compensate.

Reworked `poll`, `write` and `read` to make them more robust.
@fklassen
Copy link
Member

fixed in PR #457

@sadir
Copy link

sadir commented Jan 25, 2018

@fklassen thank you :)

@fklassen fklassen mentioned this issue Jan 26, 2018
Closed
fklassen added a commit that referenced this issue Oct 19, 2018
@fklassen
Merge branch 'Enhancement_#493_codacy_fixes' into coverity_scan
a2cd56a 
* Enhancement_#493_codacy_fixes: (26 commits)
  Enhancement #493 - fixes for Codacy identified issues
  Bug #486 Enforce max snaplen rather than doing realloc
  Bug #486 CVE-2018-17974 realloc memory if packet size increases
  Bug #484 CVE-2018-17582 Check for corrupt PCAP files
  4.3 - revert travis updates from merge
  Remove dead code
  resolve possible null pointer dereference
  travis-ci: add autogen package
  Bug #461 build warnings (#462)
  #412 fix gcc 6.3 compiler warning
  #421 fix ms to ns conversion
  Bug #423 remove commented code
  Bug #423 Remove limit for tcpprep -S
  Bug #398 Rewrite of tcpdump.c (#457)
  Bug #402 memset dlt radiotap get 80211 (#454)
  #404 fix check_list return values (#453)
  #406 fix zero-length IP headers
  #416 apply STDIN restore to all programs
  #416 fix compile issue introduced by downstream PR
  #416 update CHANGELOG [ci skip]
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fklassen fklassen

Labels
bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@fklassen @TangMonk @sadir