Maybe you can try ?<br><br>gdb /path/to/suricata /path/to/core --batch --quiet > -ex "thread apply all bt full" > backtrace.log<br><br><div class="gmail_quote">On Fri, Jul 29, 2011 at 6:31 AM, Paul Halliday <span dir="ltr"><<a href="mailto:paul.halliday@gmail.com">paul.halliday@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div><div></div><div class="h5">On Fri, Jul 29, 2011 at 1:55 AM, Anoop Saldanha <<a href="mailto:poonaatsoc@gmail.com">poonaatsoc@gmail.com</a>> wrote:<br>
><br>
><br>
> On Wed, Jul 27, 2011 at 4:33 PM, Paul Halliday <<a href="mailto:paul.halliday@gmail.com">paul.halliday@gmail.com</a>><br>
> wrote:<br>
>><br>
>> Jul 26 21:27:35 nm1 kernel: pid 67628 (suricata), uid 0: exited on<br>
>> signal 6 (core dumped)<br>
>><br>
>> Looks like it has happened twice. This time after about 3 hours of<br>
>> operation.<br>
>><br>
>> Want anything before I upgrade?<br>
>><br>
>> --<br>
>> Paul Halliday<br>
>> <a href="http://www.squertproject.org/" target="_blank">http://www.squertproject.org/</a><br>
>> _______________________________________________<br>
>> Oisf-users mailing list<br>
>> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
>> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
><br>
> Can you attach your core dump and your log file?<br>
><br>
> --<br>
> Anoop Saldanha<br>
><br>
><br>
<br>
</div></div>The core dump is 800MB :)<br>
<div><div></div><div class="h5">_______________________________________________<br>
Oisf-users mailing list<br>
<a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
<a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
</div></div></blockquote></div><br>