[Oisf-devel] FlowShutdown

[Victor Julien]

On 04/08/2013 10:39 AM, Prabhakaran Kasinathan wrote:
> What does this error represent ? 
> 
> 
>     [Thread 0xb5f89b70 (LWP 11211) exited]
>     [Thread 0xb4865b70 (LWP 11213) exited]
>     [Thread 0xb4064b70 (LWP 11214) exited]
> 
>     suricata: flow.c:478: FlowShutdown: Assertion
>     `!((f->use_cnt_sc_atomic__) != 0)' failed.
> 
>     Program received signal SIGABRT, Aborted.
>     0x0012d422 in __kernel_vsyscall ()
>     (gdb)

The flow has a reference counter "use_cnt". It's atomic, so it has the
_sc_atomic suffix. This reference counter is increased for each packet
that references the flow. If at shut down, when we should have no more
active packets, there is still a non-zero use_cnt, it most likely means
that a packet got lost inside suricata somehow.

Are you seeing this in the official code? Or are you running your own
modifications?

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------