Actions
Bug #1147
closedSuricata 2.0rc2 nfq runmode=auto segmentation fault
Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:
Description
Segmentation fault when runmode=auto and runmodetype=nfq.
(gdb) bt full #0 0x0000000000000000 in ?? () No symbol table info available. #1 0x00000000005b772c in TmThreadsSlot1NoInOut (td=0x27a62d30) at tm-threads.c:377 SlotFunc = 0 tv = 0x27a62d30 s = 0x27a62e20 run = 1 '\001' r = TM_ECODE_OK __FUNCTION__ = "TmThreadsSlot1NoInOut" #2 0x00007f09455e79d1 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00007f0945130b6d in clone () from /lib64/libc.so.6 No symbol table info available.
[root@omniscient suricata]# suricata --build-info This is Suricata version 2.0rc2 RELEASE Features: NFQ PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LIBJANSSON SIMD support: SSE_4_2 SSE_4_1 SSE_3 Atomic intrisics: 1 2 4 8 16 byte(s) 64-bits, Little-endian architecture GCC version 4.4.7 20120313 (Red Hat 4.4.7-4), C version 199901 L1 cache line size (CLS)=64 compiled with LibHTP v0.5.10, linked against LibHTP v0.5.10 Suricata Configuration: AF_PACKET support: yes PF_RING support: no NFQueue support: yes IPFW support: no DAG enabled: no Napatech enabled: no Unix socket enabled: yes Detection enabled: yes libnss support: yes libnspr support: yes libjansson support: yes Prelude support: no PCRE jit: no libluajit: no libgeoip: yes Non-bundled htp: no Old barnyard2 support: no CUDA enabled: no Suricatasc install: yes Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Profiling enabled: no Profiling locks enabled: no Coccinelle / spatch: no Generic build parameters: Installation prefix (--prefix): /usr Configuration directory (--sysconfdir): /etc/suricata/ Log directory (--localstatedir) : /var/log/suricata/ Host: x86_64-redhat-linux-gnu GCC binary: gcc -std=gnu99 GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: no
Files
Updated by Victor Julien almost 11 years ago
The bt is weird, you mentioned nfq, but the bt has:
Thread 5 (Thread 28490):
#0 0x00007fa8692a4343 in poll () from /lib64/libc.so.6 #1 0x00000000005938e0 in ReceiveAFPLoop (tv=0x5225c10, data=0x7fa8600008c0, slot=0x5227260) at source-af-packet.c:1036 #2 0x00000000005d3707 in TmThreadsSlotPktAcqLoop (td=0x5225c10) at tm-threads.c:703 #3 0x00007fa8697649d1 in start_thread () from /lib64/libpthread.so.0 #4 0x00007fa8692adb6d in clone () from /lib64/libc.so.6
This is AF_PACKET...
Updated by Victor Julien almost 11 years ago
In general, runmode auto isn't very good. I may even remove it. Use workers or autofp.
Actions