[Oisf-devel] Bug with PF_RING

[tingwei liu]

On Fri, Feb 24, 2012 at 4:14 PM, tingwei liu <tingw.liu at gmail.com> wrote:

> My suricata is well with the normal mode.
>
> It core dumped while with the pfring mode. Just like: suricata -c
> /etc/suricata/suricata.yaml --pfring=eth0
> System is Fedora Core x86_64
> Linux Kernel is 3.0.8
> PF_RING version is 5.2.1
> suricata version is 1.2.1
>
> I have debug it by gdb:
>
> (gdb) bt
> #0  0x0000003cfc13661d in __memcpy_ssse3_back () from /lib64/libc.so.6
> #1  0x0000003291a27c73 in pfring_mod_recv (ring=0x7ffff0000940,
> buffer=0x1cd13d8, buffer_len=1516, hdr=0x7ffff6b89500,
>     wait_for_incoming_packet=1 '\001') at pfring_mod.c:422
> #2  0x0000003291a25e9d in pfring_recv (ring=0x7ffff0000940,
> buffer=0x1cd13d8, buffer_len=1516, hdr=0x7ffff6b89500,
>     wait_for_incoming_packet=1 '\001') at pfring.c:335
> #3  0x0000000000420208 in ReceivePfringLoop ()
> #4  0x00000000006f0867 in TmThreadsSlotPktAcqLoop ()
> #5  0x0000003cfc407cd1 in start_thread () from /lib64/libpthread.so.0
> #6  0x0000003cfc0dfd3d in clone () from /lib64/libc.so.6
> (gdb)
>
>
> The bug like in libpfring, but other program depend this libpfring is ok.
>
> Please to fix the bug. Thanks.
>
Anyone encounter this problem?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20120224/96651009/attachment-0002.html>