geedge-jira/md/OMPUB-847.md

# 福建项目：现场执行nohup tcpdump_mesa命令导致sapp服务异常中断

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-847 | 2023-03-13T16:15:45.000+0800 | 刘学利 | 已解决 |


---

*现场sapp版本*：sapp-4.2.90.8c77537-1.el8.x86_64
*现场tcpdump_mesa版本*：tcpdump mesa-1.0.13.6ec67f5-1.el7.x86 64
*现场执行的命令*：
nohup tcpdump_mesa -P 9345 -g -n -n -c 10000 -w /root/pcap/\`hostname\`.pcap '(dst 218.207.198.49 or dst 120.37.120.82 or dst 110.88.153.89 or dst 110.88.153.102 or dst 218.6.92.210 or dst 222.76.126.74 or dst 119.23.116.46 or dst 218.85.55.50 or dst 112.111.2.27 or dst 110.88.153.43 or dst 222.78.227.230 or dst 218.5.3.152 or dst 124.70.125.157 or dst 124.70.125.147 or dst 124.71.234.127 or dst 220.250.17.78 or dst 27.150.188.52 or dst 202.101.157.199 or dst 110.86.18.107 or dst 110.88.153.102 or dst 59.61.79.83 or dst 110.86.18.106 or dst 202.101.157.201 or dst 117.25.142.181 or dst 27.150.168.129 or dst 139.199.92.77 or dst 218.66.217.105 or dst 27.156.117.162 or dst 111.186.240.29 or dst 183.250.27.232 or dst 222.77.69.102 or dst 61.154.9.38 or dst 61.154.9.39 or dst 39.103.143.16 or dst 121.204.161.227 or dst 110.90.94.74 or dst 112.5.14.91 or dst 220.161.145.212 or dst 222.77.74.162 or dst 47.105.213.56 or dst 140.237.239.46 or dst 159.75.251.183 or dst 47.110.94.91 or dst 220.200.5.10 or dst 27.151.3.161 or dst 121.192.178.179 or dst 61.154.9.209 or dst 27.151.119.41 or dst 120.35.7.44 ) and ( dst port 104  or dst port 2761 or dst port 11112 or dst port  2575 or dst port 20046)' >/root/www.log 2>&1 &


*在其他环境（TSG-22.12）执行下列命令，可复现该问题，sapp版本sapp-pr-4.2.90.8c77537-1.el8.x86_64，生成的minidump文件已上传至附件*：
nohup tcpdump_mesa -P 9345 -g -n -n -c 10000 -w /root/pcap/test.pcap '(dst 218.207.198.49 or dst 120.37.120.82 or dst 110.88.153.89 or dst 110.88.153.102 or dst 218.6.92.210 or dst 222.76.126.74 or dst 119.23.116.46 or dst 218.85.55.50 or dst 112.111.2.27 or dst 110.88.153.43 or dst 222.78.227.230 or dst 218.5.3.152 or dst 124.70.125.157 or dst 124.70.125.147 or dst 124.71.234.127 or dst 220.250.17.78 or dst 27.150.188.52 or dst 202.101.157.199 or dst 110.86.18.107 or dst 110.88.153.102 or dst 59.61.79.83 or dst 110.86.18.106 or dst 202.101.157.201 or dst 117.25.142.181 or dst 27.150.168.129 or dst 139.199.92.77 or dst 218.66.217.105 or dst 27.156.117.162 or dst 111.186.240.29 or dst 183.250.27.232 or dst 222.77.69.102 or dst 61.154.9.38 or dst 61.154.9.39 or dst 39.103.143.16 or dst 121.204.161.227 or dst 110.90.94.74 or dst 112.5.14.91 or dst 220.161.145.212 or dst 222.77.74.162 or dst 47.105.213.56 or dst 140.237.239.46 or dst 159.75.251.183 or dst 47.110.94.91 or dst 220.200.5.10 or dst 27.151.3.161 or dst 121.192.178.179 or dst 61.154.9.209 or dst 27.151.119.41 or dst 120.35.7.44 ) and ( dst port 104  or dst port 2761 or dst port 11112 or dst port  2575 or dst port 20046)' >/root/www.log 2>&1 &**yangwei** commented on *2023-03-20T11:00:34.442+0800*:

[~zhangzhihan]  用tmux前台执行能复现么？

 

*其他环境（TSG-22.12）执行下列命令*

 

这个版本看名称（包含-pr）是加壳的，minidump没有符号名



---

**yangwei** commented on *2023-03-20T11:02:18.182+0800*:

请补充下现场情况，是命令刚执行完就会导致sapp段错误，还是运行一段时间后？描述中缺乏这部分的信息



---

**zhangzhihan** commented on *2023-03-20T11:53:13.345+0800*:

[~yangwei]复现该现象是在亦庄的TSG-X上复现出来的，当时执行nohup tcpdump_mesa后，大概过了10几秒，sapp挂了；
上午在信息港一个PVE中的tsg-os（没有流量）中执行nohup tcpdump_mesa，执行后sapp正常，但是当我kill掉nohup tcpdump_mesa的进程是，sapp挂了；

下图是在信息港PVE中的tsg-os里看到的报错
 !screenshot-1.png|thumbnail! 



---

**yangwei** commented on *2023-04-06T16:54:31.166+0800*:

[~zhangzhihan] 麻烦提供一下“信息港一个PVE中的tsg-os”的IP，方便排查问题



---

**gitlab** commented on *2023-07-06T10:54:58.599+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/MESA_Platform/sapp/-/commit/e90a5734dfff7ce1657aee86a026bb1890e5d3ce] of [MESA Platform / sapp|https://git.mesalab.cn/MESA_Platform/sapp] on branch [Fix-OMPUB-847|https://git.mesalab.cn/MESA_Platform/sapp/-/tree/Fix-OMPUB-847]:{quote}🐞 fix(pkt_dump_command buffer len): fix OMPUB-847{quote}



---

**yangwei** commented on *2023-07-06T10:58:16.237+0800*:

原因为接收tcpdump_mesa参数的缓冲区溢出，原有长度为1024，issue中的参数超过了内部定义的长度，，修复后改为ARG_MAX，bash支持输入的最大参数长度



---

**gitlab** commented on *2023-07-06T12:05:18.178+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/MESA_Platform/sapp/-/merge_requests/338] of [MESA Platform / sapp|https://git.mesalab.cn/MESA_Platform/sapp] on branch [Fix-OMPUB-847|https://git.mesalab.cn/MESA_Platform/sapp/-/tree/Fix-OMPUB-847]:{quote}🐞 fix(pkt_dump_command buffer len): fix OMPUB-847{quote}



---



# Attachments

Attachment: 36be51e4-db2a-4afe-b5a7b0a5-ce230e9d.dmp
[36be51e4-db2a-4afe-b5a7b0a5-ce230e9d.dmp](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/36100/36be51e4-db2a-4afe-b5a7b0a5-ce230e9d.dmp)



Attachment: screenshot-1.png
![screenshot-1.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/36383/screenshot-1.png)