[Oisf-users] suricata crashed with --pfring if interface is bridge member

[Delta Yeh]

Latest update:
 The kernel is 64bit, while the  userland is 32bit.

After change the kernel to 32bit, it works.

I think 64bit kernel + 64bit userland should work.

So the the conclusion maybe  64bit pfring kernel module can't work
with 32bit userland lib ?

2011/12/6 Delta Yeh <delta.yeh at gmail.com>:
> # brctl show
> bridge name     bridge id               STP enabled     interfaces
> br0             8000.0093110121c3       yes             eth0
>                                                                            eth1
>
>
> # /root/tmp/suricata  -c /root/tmp/suricata.yaml  --pfring=eth1
> [54793] 6/12/2011 -- 16:23:16 - (suricata.c:651) <Info> (main) -- This
> is Suricata version 1.2dev (rev )
> .....
> Init) -- all 4 packet processing threads, 1 management threads
> initialized, engine started.
> Segmentation fault
>
>
> Program received signal SIGSEGV, Segmentation fault.
> [Switching to Thread -155526288 (LWP 46723)]
> 0x0806138d in ReceivePfringLoop (tv=0x0, data=0x8f845c8, slot=0x8f84058)
>    at source-pfring.c:258
> 258     source-pfring.c: No such file or directory.
>        in source-pfring.c
> (gdb) bt
> #0  0x0806138d in ReceivePfringLoop (tv=0x0, data=0x8f845c8, slot=0x8f84058)
>    at source-pfring.c:258
> #1  0x00000000 in ?? ()
> (gdb) frame 0
> #0  0x0806138d in ReceivePfringLoop (tv=0x0, data=0x8f845c8, slot=0x8f84058)
>    at source-pfring.c:258
> 258     in source-pfring.c
> (gdb) l
> 253     in source-pfring.c
> (gdb) info args
> tv = (ThreadVars *) 0x0
> data = (void *) 0x8f845c8
> slot = (void *) 0x8f84058
> (gdb) frame 1
> #1  0x00000000 in ?? ()
> (gdb)
>
> When I try eth0 ,same crash.
>
> But with eth2 which is not a member of bridge interface,  is OK:
> # /root/suricata  -c /root/suricata.yaml  --pfring=eth2
>
>
> [56053] 6/12/2011 -- 16:26:50 - (source-pfring.c:337) <Info>
> (ReceivePfringThreadInit) -- (RxPFR1) Using PF_RING v.5.1.0, interface
> eth2, single-pfring-thread
> [56051] 6/12/2011 -- 16:26:50 - (tm-threads.c:1806) <Info>
> (TmThreadWaitOnThreadInit) -- all 4 packet processing threads, 1
> management threads initialized, engine started.
>
>
>
>
> BR,
> DeltaY