@9hills

你好，279行的代码就是下面这个

if (!lfc_run(fc->lfc, fc->file, fc->filter))
die("Reading file '%s' failed\n", fc->file);

你意思是GDB下面Print？

你好，279行的代码就是下面这个

if (!lfc_run(fc->lfc, fc->file, fc->filter))
die("Reading file '%s' failed\n", fc->file);

@9hills

(gdb) bt
#0 0xb76fc424 in __kernel_vsyscall ()
#1 0xb75521df in raise () from /lib/i386-linux-gnu/libc.so.6
#2 0xb7555825 in abort () from /lib/i386-linux-gnu/libc.so.6
#3 0xb76d7260 in _die (file=0x8049d1e "flowcalc.c", line=279,
fn=0x804a2e9 "main", msg=0x804a2cf "Reading file '%s' failed\n")
at lib.c:126
#4 0x080497a0 in main ()

@9hills

GDB RESULT:

warning: Can't read pathname for load map: 输入/输出错误.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
Core was generated by `flowcalc /home/maopengxin/trace/20010316.pcap.gz -e basic'.
Program terminated with signal 6, Aborted.
#0 0xb76fc424 in __kernel_vsyscall ()
gdb()

@way2exluren 是的，装了一个程序，读取的数据格式没问题，从官网下载的

@way2exluren
root@root-F81Se:~/下载/flowcalc$ flowcalc /trace/20010316.pcap.gz -e basic
%% flowcalc run at Sun Mar 1 10:43:47 2015
% modules: basic

@relation '/trace/20010316.pcap.gz'

%% flowcalc 0.1
% fc_id: flow id
% fc_tstamp: timestamp of first packet in the flow
% fc_duration: flow duration
% fc_proto: transport protocol
% fc_src_addr: IP address of connection initiator
% fc_src_port: TP port number of connection initiator
% fc_dst_addr: IP address of remote peer
% fc_dst_port: TP port number of remote peer
@attribute fc_id numeric
@attribute fc_tstamp numeric
@attribute fc_duration numeric
@attribute fc_proto {TCP,UDP}
@attribute fc_src_addr string
@attribute fc_src_port numeric
@attribute fc_dst_addr string
@attribute fc_dst_port numeric

%% basic_stats 0.1
% bs_min_size_up: minimum payload size in forward direction
% bs_avg_size_up: average payload size in forward direction
% bs_max_size_up: maximum payload size in forward direction
% bs_std_size_up: standard deviation of payload size in forward direction
% bs_min_size_down: minimum payload size in backward direction
% bs_avg_size_down: average payload size in backward direction
% bs_max_size_down: maximum payload size in backward direction
% bs_std_size_down: standard deviation of payload size in backward direction
% bs_min_iat_up: minimum inter-arrival time in forward direction
% bs_avg_iat_up: average inter-arrival time in forward direction
% bs_max_iat_up: maximum inter-arrival time in forward direction
% bs_std_iat_up: standard deviation of inter-arrival time in forward direction
% bs_min_iat_down: minimum inter-arrival time in backward direction
% bs_avg_iat_down: average inter-arrival time in backward direction
% bs_max_iat_down: maximum inter-arrival time in backward direction
% bs_std_iat_down: standard deviation of inter-arrival time in backward direction
@attribute bs_min_size_up numeric
@attribute bs_avg_size_up numeric
@attribute bs_max_size_up numeric
@attribute bs_std_size_up numeric
@attribute bs_min_size_down numeric
@attribute bs_avg_size_down numeric
@attribute bs_max_size_down numeric
@attribute bs_std_size_down numeric
@attribute bs_min_iat_up numeric
@attribute bs_avg_iat_up numeric
@attribute bs_max_iat_up numeric
@attribute bs_std_iat_up numeric
@attribute bs_min_iat_down numeric
@attribute bs_avg_iat_down numeric
@attribute bs_max_iat_down numeric
@attribute bs_std_iat_down numeric

@data
Opening trace file: Unable to guess format (/trace/20010316.pcap.gz)
flowcalc.c:279 main(): Reading file '/trace/20010316.pcap.gz' failed

已放弃 (核心已转储)

@yksoft1 谢谢你啊，整个程序调试成功了，那个确实是个警告，不影响程序的库的生成。再次3Q。

@flybug你说的这种办法适合CMCC-EDU吗

@yksoft1 我把定位错误的两段C++代码copy出来了，帮我看一下哪个地方出问题了，谢谢

static void flow_summarize(struct lfc *lfc, struct lfc_ext *le)
{
struct lfc_plugin *lp;
void *ptr;

if (le->done) return;

ptr = le->data;
tlist_reset(lfc->plugins);

while ((lp = (struct lfc_plugin *) tlist_iter(lfc->plugins))) {
if (lp->flowcb)
lp->flowcb(lfc, lp->pdata, &le->lf, ptr);

ptr += lp->datalen;
}

le->done = true;
}




struct lfc_plugin *lp;
void *ptr;

ptr = le->data;
tlist_reset(lfc->plugins);
while ((lp = (struct lfc_plugin *) tlist_iter(lfc->plugins))) {
if (lp->pktcb)
lp->pktcb(lfc, lp->pdata, lf, ptr, ts, up, is_new, pkt);
ptr += lp->datalen;
}

lf->ts_last = ts;

@yksoft1 意思是这个警告不影响.so库文件的生成？

@yksoft1 你好，我在生成libflowcalc.so库文件时候执行makefile中的命令

g++ libflowcalc.c -o libflowcalc.so -shared -lpjf -lpcre -ltrace -lflowmanager

提示下面错误，不晓得什么意思

libflowcalc.c: 在函数‘void flow_summarize(lfc*, lfc_ext*)’中:
libflowcalc.c:40:14: 警告： ‘void *’型指针用在了算术表达式中 [-Wpointer-arith]
libflowcalc.c: 在函数‘void per_packet(lfc*, libtrace_packet_t*)’中:
libflowcalc.c:228:14: 警告： ‘void *’型指针用在了算术表达式中 [-Wpointer-arith]

@fuckcpc 确实是，而且还自建GFW

@zsx 笑死我了

@yksoft1 按你说的办法，可以生成.o文件了，但是直接执行./*.o文件提示无法执行二进制文件

ubnt

@pfitseng 确实得需要拨号

移动公司的无线宽带业务，就是需要移动公司的CPE设备来接收信号，电脑上需要宽带账号拨号上网