[Oisf-users] suricata crashed with --pfring if interface is bridge member

Delta Yeh delta.yeh at gmail.com
Tue Dec 6 08:42:30 UTC 2011


# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.0093110121c3       yes             eth0
                                                                            eth1


# /root/tmp/suricata  -c /root/tmp/suricata.yaml  --pfring=eth1
[54793] 6/12/2011 -- 16:23:16 - (suricata.c:651) <Info> (main) -- This
is Suricata version 1.2dev (rev )
.....
Init) -- all 4 packet processing threads, 1 management threads
initialized, engine started.
Segmentation fault


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -155526288 (LWP 46723)]
0x0806138d in ReceivePfringLoop (tv=0x0, data=0x8f845c8, slot=0x8f84058)
    at source-pfring.c:258
258     source-pfring.c: No such file or directory.
        in source-pfring.c
(gdb) bt
#0  0x0806138d in ReceivePfringLoop (tv=0x0, data=0x8f845c8, slot=0x8f84058)
    at source-pfring.c:258
#1  0x00000000 in ?? ()
(gdb) frame 0
#0  0x0806138d in ReceivePfringLoop (tv=0x0, data=0x8f845c8, slot=0x8f84058)
    at source-pfring.c:258
258     in source-pfring.c
(gdb) l
253     in source-pfring.c
(gdb) info args
tv = (ThreadVars *) 0x0
data = (void *) 0x8f845c8
slot = (void *) 0x8f84058
(gdb) frame 1
#1  0x00000000 in ?? ()
(gdb)

When I try eth0 ,same crash.

But with eth2 which is not a member of bridge interface,  is OK:
# /root/suricata  -c /root/suricata.yaml  --pfring=eth2


[56053] 6/12/2011 -- 16:26:50 - (source-pfring.c:337) <Info>
(ReceivePfringThreadInit) -- (RxPFR1) Using PF_RING v.5.1.0, interface
eth2, single-pfring-thread
[56051] 6/12/2011 -- 16:26:50 - (tm-threads.c:1806) <Info>
(TmThreadWaitOnThreadInit) -- all 4 packet processing threads, 1
management threads initialized, engine started.




BR,
DeltaY



More information about the Oisf-users mailing list