Project

General

Profile

Actions

Bug #63

closed

Engine fails to work properly on ppc platform.

Added by Will Metcalf almost 15 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The following rule causes the engine to hang for 15 minutes at initialization. The problem appears to be in the ip address grouping.

alert tcp any any -> any any (msg:"ppc Test Rule"; sid:2031337;)

You can also reproduce the behavior by running the following unittest.

src/suricata -u -U "SigTestBidirec03" -c suricata.yaml -l ./

Each sample counts as 0.01 seconds.
% cumulative self self total
time seconds seconds calls s/call s/call name
51.49 116.66 116.66 4294901808 0.00 0.00 DetectAddressCmp
27.96 180.01 63.35 131130 0.00 0.00 HashListTableLookup
8.82 199.99 19.98 4294901776 0.00 0.00 DetectAddressCmpIPv4
8.13 218.42 18.43 4294901760 0.00 0.00 IPOnlyCompareFunc
3.55 226.46 8.04 call___do_global_ctors_aux
0.03 226.52 0.06 262257 0.00 0.00 SigGroupHeadAppendSig
0.00 226.53 0.01 262144 0.00 0.00 IPOnlyHashFunc16
0.00 226.54 0.01 131164 0.00 0.00 SigGroupHeadInitDataFree
0.00 226.55 0.01 131120 0.00 0.00 DetectAddressCopy
0.00 226.56 0.01 21 0.00 0.00 HashListTableFree
0.00 226.57 0.01 10 0.00 0.00 PoolFree
0.00 226.58 0.01 1 0.01 0.02 IPOnlyPrepare
0.00 226.59 0.01 1 0.01 0.01 TmThreadWaitOnThreadInit

Actions

Also available in: Atom PDF