While running /etc/cron.daily/sarg against a medium size squid access.log file, this error showed on the screen of a CentOS 5.3 x64 box:
“sarg[5646]: segfault at 000000008d784200 rip 0000003280078d80 rsp 00007fff8d784d78 error 4″
After googling for a while I found this thread explaining similar problems. Apparently the current sarg rpmforge package for RHEL 5 x64 has some kind of bug when dealing with long url’s. I also noticed that at the rpmforge repository for sarg there is a newer version, sarg-2.2.5-1, but the aren’t packages for RHEL 5 x86 x64 arquitecture, only for FC and RHEL PPC.
The fix is pretty simple, just uninstall the x64 version and install the i386 version. /etc/cron.daily/sarg will ran without problems after changing to the x86 version.
At the time this post was written, latest rpmforge sarg packages for CentOS 5 x64 & i386 were:
sarg-2.2.3.1-1.el5.rf.x86_64.rpm <– I was using this when I got the error
sarg-2.2.3.1-1.el5.rf.i386.rpm <– changing to this one fixed the problem
I did this for changing the package version:
- rpm -ev rpm -ev sarg-2.2.3.1-1.el5.rf
- wget http://packages.sw.be/sarg/sarg-2.2.3.1-1.el5.rf.i386.rpm
- yum localinstall sarg-2.2.3.1-1.el5.rf.i386.rpm
