[Oisf-devel] 77b708=WIN?

[Chris Wakelin]

On 04/10/11 18:24, Martin Holste wrote:
> I recommend switching to autofp from single for PF_RING.
OK, giving that a try!

Got a slightly different crash on shutting down to make the switch by
the way:

> #0  0x0000000000427e24 in DetectMpmPrefilter (th_v=<value optimised out>, de_ctx=<value optimised out>, det_ctx=0x99462b70, p=0x7f0545a67a50)
>     at detect.c:1231
> 1231                if (det_ctx->sgh->flags & SIG_GROUP_HEAD_MPM_URI) {
> #0  0x0000000000427e24 in DetectMpmPrefilter (th_v=<value optimised out>, de_ctx=<value optimised out>, det_ctx=0x99462b70, p=0x7f0545a67a50)
> #1  SigMatchSignatures (th_v=<value optimised out>, de_ctx=<value optimised out>, det_ctx=0x99462b70, p=0x7f0545a67a50) at detect.c:1435
> #2  0x0000000000428f2c in Detect (tv=0x0, p=<value optimised out>, data=0x99469eed, pq=<value optimised out>, postpq=0x99469f00) at detect.c:1857
> #3  0x000000000041f1fc in FlowForceReassemblyForQ (q=<value optimised out>) at flow-timeout.c:452
> #4  0x000000000041f313 in FlowForceReassembly () at flow-timeout.c:515
> #5  0x0000000000407b14 in main (argc=6, argv=<value optimised out>) at suricata.c:1565

Best Wishes,
Chris

-- 
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
Christopher Wakelin,                           c.d.wakelin at reading.ac.uk
IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 2908
Whiteknights, Reading, RG6 6AF, UK              Fax: +44 (0)118 975 3094