[Oisf-users] PF_RING core dump

[tingwei liu]

My suricata is well with the normal mode.
It core dumped while with the pfring mode. Just like: suricata -c
/etc/suricata/suricata.yaml --pfring=eth0
PF_RING version is 5.2.1
suricata version is 1.2.1

I have debug it by gdb:

(gdb) bt
#0  0x0000003cfc13661d in __memcpy_ssse3_back () from /lib64/libc.so.6
#1  0x0000003291a27c73 in pfring_mod_recv (ring=0x7ffff0000940,
buffer=0x1cd13d8, buffer_len=1516, hdr=0x7ffff6b89500,
    wait_for_incoming_packet=1 '\001') at pfring_mod.c:422
#2  0x0000003291a25e9d in pfring_recv (ring=0x7ffff0000940,
buffer=0x1cd13d8, buffer_len=1516, hdr=0x7ffff6b89500,
    wait_for_incoming_packet=1 '\001') at pfring.c:335
#3  0x0000000000420208 in ReceivePfringLoop ()
#4  0x00000000006f0867 in TmThreadsSlotPktAcqLoop ()
#5  0x0000003cfc407cd1 in start_thread () from /lib64/libpthread.so.0
#6  0x0000003cfc0dfd3d in clone () from /lib64/libc.so.6
(gdb)


The bug like in pfring, but other program depend this pfring is ok.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120224/c8b0b21e/attachment-0002.html>