[Oisf-users] Segmentation fault (Suricata 1.4beta3)

Fernando Sclavo fsclavo at gmail.com
Thu Dec 6 14:10:01 UTC 2012


   Hi Peter, HW is:

Dell R715
2 x 16 cores AMD Opteron(tm) Processor 6284 SE
192Gb RAM
2 x Intel x520 (dual port each)
6 x 600gb SAS drives

SW: Ubuntu server 12.04 LTS,  with Intel ixgbe driver and some tuned knobs
in kernel and driver (increased buffers, IRQ affinity, multiqueue, etc).

Each NIC has only one port connected, and we will increase the traffic on
the next days (add more ports to our monitoring sessions on the core
switches). I will keep you informed of the progress!


On 12/06/2012 10:33 AM, Peter Manev wrote:
> Hi Fernando,
> I am glad your problems are gone now :)
>
> On what kind of HW - out of curiosity - are you running? CPU/RAM/HDD/NIC
if it is not too much to ask.
>
> thank you
>
> On Thu, Dec 6, 2012 at 2:23 PM, Fernando Sclavo <fsclavo at gmail.com
<mailto:fsclavo at gmail.com> <fsclavo at gmail.com>> wrote:
>
>

No more crashes with 1.4rc1: our IDS is dealing with 2~3gbps, 12000 rules
and 3500000 sessions without any drop.
Thanks a lot for your help!



On 12/05/2012 03:13 AM, Victor Julien wrote:
> On 12/04/2012 08:09 PM, Fernando Sclavo wrote:
> > Hi! Just a minute ago Suricata crash with segfault. The core dump
> > size is about 1.7Gb, I can upload to a ftp site if developers
> > wants.

> Can you retry with 1.4rc1?

> Thanks!

> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
<mailto:oisf-users at openinfosecfoundation.org><oisf-users at openinfosecfoundation.org>
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/



 >
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
<mailto:oisf-users at openinfosecfoundation.org><oisf-users at openinfosecfoundation.org>
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
>
>
>
>
> --
> Regards,
> Peter Manev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20121206/382ecfe9/attachment-0002.html>


More information about the Oisf-users mailing list