<div dir="ltr"><div><div><div><div>I'm seeing a dmesg that states:<br>[287594.672339] Detect1[4179]: segfault at b62007bd ip 081aab38 sp b5efe794 error 4 in suricata[8048000+209000]<br><br></div>That is the only msg I can find noting a reason why suricata is crashing:<br><br></div>My build:<br>Suricata version 3.0.1 RELEASE<br><br>Suricata Configuration: [no's omitted]<br>  AF_PACKET support:                       yes<br>  NFQueue support:                         yes<br>  Detection enabled:                       yes<br>  PCRE jit:                                yes<br>  Suricatasc install:                      yes<br>Generic build parameters:<br>  Installation prefix:                     /usr<br>  Configuration directory:                 /etc/suricata/<br>  Log directory:                           /var/log/suricata/<br><br>  --prefix                                 /usr<br>  --sysconfdir                             /etc<br>  --localstatedir                          /var<br><br>  Host:                                    i686-pc-linux-gnu<br>  Compiler:                                gcc (exec name) / gcc (real)<br>  GCC Protect enabled:                     no<br>  GCC march native enabled:                no<br>  GCC Profile enabled:                     no<br>  Position Independent Executable enabled: no<br>  CFLAGS                                   -g -O2<br>  PCAP_CFLAGS                               -I/usr/include<br>  SECCFLAGS<br><br></div>I was just curious if anyone else had seen ver 3.0.1 behave like this?<br><br></div>I just ran a microcode update against my cpu's to make sure it wasn't microcode related:<br>apt-get install microcode.ctl intel-microcode cpuid iucode-tool<br><br>rebooted<br><br>/usr/sbin/iucode_tool -tb -lS /lib/firmware/intel-ucode/*<br>/usr/sbin/iucode_tool: system has processor(s) with signature 0x000406d8<br>selected microcodes:<br><div><div><br></div><div>No selected microcodes should mean I don't need any new proc microcode.<br><br></div><div>I'll restart my suricata appliance and see if it crashes again.<br><br></div><div>Thanks.<br><br><br></div><div><br></div></div></div>