Triggered processes by print module being infinitely leaved in zombie state
MuriloChianfa opened this issue · comments
Description
Hello guys, im testing the nfacctd with print module, and i have founded a bug when using the "print_trigger_exec" cfg key.
If I leave it on for a long time, it creates many processes with a zombie state, like this:
The longer I leave it running, the more of these processes are created, until there comes a point where the machine is very slow.
Do you think I'm doing something wrong?
My lab environment:
Version
Using official latest docker image.
NetFlow Accounting Daemon, nfacctd 1.7.8-git [20221231-1 (723b0cb2)]
Arguments:
'--enable-mysql' '--enable-pgsql' '--enable-sqlite3' '--enable-kafka' '--enable-geoipv2' '--enable-jansson' '--enable-rabbitmq' '--enable-nflog' '--enable-ndpi' '--enable-zmq' '--enable-avro' '--enable-serdes' '--enable-redis' '--enable-gnutls' 'AVRO_CFLAGS=-I/usr/local/avro/include' 'AVRO_LIBS=-L/usr/local/avro/lib -lavro' '--enable-l2' '--enable-traffic-bins' '--enable-bgp-bins' '--enable-bmp-bins' '--enable-st-bins'
Libs:
cdada 0.4.0
libpcap version 1.8.1
MariaDB 10.3.36
PostgreSQL 110018
sqlite3 3.27.2
rabbimq-c 0.11.0
rdkafka 2.0.0
jansson 2.14
MaxmindDB 1.7.1
ZeroMQ 4.3.2
Redis 1.1.1
GnuTLS 3.6.7
avro-c
serdes
nDPI 4.2.0
netfilter_log
Plugins:
memory
print
nfprobe
sfprobe
tee
mysql
postgresql
sqlite
amqp
kafka
System:
Linux 6.1.0-13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.55-1 (2023-09-29) x86_64
Compiler:
gcc 8.3.0Appreciation
My appreciations, kind regards, from Brazil.
Ola' @MuriloChianfa , can you please try the bleeding-edge container instead of latest and check if you are still getting those zombies? Also, should you try with a dumb script, say just a script that does nothing or exits - do you still get the zombies? Paolo
Using now with bleeding-edge version and a dumb script but the problem still occurring.
I also noticed that the more plugins: print[x]... we have, the faster it fills with zombies.
Version:
pmacct IMT plugin client, pmacct 1.7.9-git (20231101-0 (a091a85))
Hi @MuriloChianfa ,
Apologies for the latency. I notice a new kernel, 6.1, with a relatively old compiler gcc8. Can you say what Linux distribution are you running? Or any hints so that i can reproduce your environment in docker? I tried a few recent Debian, Ubuntu and Rocky Linux and i could not reproduce the issue -- but truth being i always stumble with a 5.10 kernel.
Paolo