Hi All,

I am working for a Networking company, where device is built upon Linux kernel. Normally we gets cases for device crash and we analyse "crashinfo" file which contains Traceback.

I would like to read tracebacks, if you have any good document Please provide me.

Regards,
Neo

According to Wikipedia, "IP traceback" is a generic term for

Traceback can also refer to other things beside "IP traceback," as a web search for "traceback" shows. Could you be more specific about the nature of these traceback files?

1 members found this post helpful.

I am talking about kernal crash, please refer bellow "traceback".

Thread 1 (process 935):
#0 abcd-function-1 (arg=0xffffdfb4e8, firstp=0xffffdfb4c0,
ruleno=2, appid=698, field=0x80000000be5579f0, fid=16382, id=28279,
patmatch=0x0, alerts=0xffffdfb338, qualifier_bitmask=2,
qualifier=0x80000000bf5c1c0c <Address 0x80000000bf5c1c0c out of bounds>,
count=1, is_cts=0, lookup=0x0, match_offset=0) at pan_detector.c:926
#1 0x0000005555caafe4 in abcd-function-2 (arg=0xffffdfb4e8,
firstp=0xffffdfb4c0, ruleno=2, appid=698, field=0x80000000be5579f0,
offset=29921, is_cts=0, alerts=0xffffdfb338) at pan_detector.c:1069
#2 0x0000005555cabf1c in abcd-function-3 (arg=0xffffdfb4e8,
firstp=0xffffdfb4c0, ruleno=2, decoder_appid=698,

This is not regular kernel code.
ruleno, aho_lookup (for Aho-Corasick?) and tcpseq make this look like output from a pattern matching engine (or more precise an IDS or IPS solution).
So what kernel / OS is this and who is the vendor?

1 members found this post helpful.

Hi Upswan,

What is Aho-Corasick? And how did you find out its an IDS or IPS solution?

Please answer the question and please do not mutilate my chosen handle.

Hi UnSpawn,

Its a Linux Kernel and Checkpoint is the vendor.

Regards,
Hardik Shah