[Oisf-users] Crash in 1.4rc1

[Fernando Sclavo]

>From /usr/bin/suricata, but there wasn't core file because limits.conf
wasn't configured.
I changed that (2gb core size limit) and rebooted the server.

On 12/11/2012 09:25 AM, Victor Julien wrote:
> I'm not a fan of apport, maybe we can bypass it.
>
> How and where in the filesystem did you start Suricata?
>
> Cheers,
> Victor
>
> On 12/11/2012 01:14 PM, Fernando Sclavo wrote:
>> Unfortunately the crash doesn't have a core inside:
>>
>> idsuser at suricata:/var/crash$ sudo apport-retrace -s
>> _usr_bin_suricata.0.crash
>> ERROR: report file does not contain one of the required fields: CoreDump
>> DistroRelease Package ExecutablePath
>>
>> I double checked that core dump is enabled and I expect to catch one if
>> this happens again.
>>
>> On 12/10/2012 06:24 PM, Victor Julien wrote:
>>> On 12/10/2012 08:42 PM, Fernando Sclavo wrote:
>>>> Hi all! Yesterday my IDS crashed with the following error:
>>>> Dec 9 18:07:16 localhost kernel: [71772.875177]
>>>> AFPacketeth710[1809] general protection ip:48c04d sp:7ffd8e7fab40
>>>> error:0 in suricata[400000+1b1000]
>>>> Apport crash in:
>>>> https://dl.dropbox.com/u/9555438/_usr_bin_suricata.0.crash.gz
>>>> Please let me know if I can do anything to help debug the problem.
>>> Can you try to get a backtrace?
>>> _______________________________________________
>>> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>>> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
>>> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>> OISF: http://www.openinfosecfoundation.org/
>>
>>
>>
>>
>>
>> _______________________________________________
>> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
>> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>> OISF: http://www.openinfosecfoundation.org/
>>