[Oisf-users] Still getting segfaults when file extraction is enabled.

Cooper F. Nelson cnelson at ucsd.edu
Thu Aug 22 17:06:36 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Seems pretty random and appears to happen less often with short tcp
timeouts.  Gdb.txt is attached.

> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/lib64/libthread_db.so.1".
> Core was generated by `/usr/bin/suricata -D -c /etc/suricata/suricata.yaml --af-packet=eth2 -F /etc/su'.
> Program terminated with signal 11, Segmentation fault.
> #0  0x0000000000000000 in ?? ()

- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSFkUcAAoJEKIFRYQsa8FWk9AIALo+nPr5B1yOGiGxi0uUke+S
Umo9KADqVH8CqqwCPAf/Xj2WdxGSnXVLj9EVpqKqoygWJfnvcr33IgSaGkoXYiA4
w9RX4eRknrr4PfTj9HTXuYNN7MK1Pt5wEsqe/kOxEx8YQ07E47hM6iSFw1bLGTUD
y5/sAhRfvlhWMbFua0QrgMNgd1C/bQhT+FW2Ti5DtMGkr4R9QdEA/k1gcwHAe3tz
pndpnE7Z0QgZ0Qr/njxVUfCl7CkTbgwAhJZgv5jFgZSXSIL3//sW5FnR4JpxIgnz
FUFWKjbNWfbvWQByNfzryeviLBhzfzDYPnWB7OiL5EHJWF/sO0CGPWDpaWM3rj0=
=21tY
-----END PGP SIGNATURE-----
-------------- next part --------------

Thread 20 (Thread 0x7f3e6a0d2700 (LWP 3323)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 19 (Thread 0x7f3e265bc700 (LWP 3337)):
#0  0x00007f3e6f8870de in pthread_cond_timedwait () from /lib64/libpthread.so.0
#1  0x00007f3e709d1f7d in SCPerfMgmtThread ()
#2  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#3  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 18 (Thread 0x7f3e27fff700 (LWP 3334)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 17 (Thread 0x7f3e649f9700 (LWP 3327)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 16 (Thread 0x7f3e69691700 (LWP 3324)):
#0  0x00007f3e6f8897a4 in __lll_lock_wait () from /lib64/libpthread.so.0
#1  0x00007f3e6f88519c in _L_lock_518 () from /lib64/libpthread.so.0
#2  0x00007f3e6f884feb in pthread_mutex_lock () from /lib64/libpthread.so.0
#3  0x00007f3e70a04640 in SigMatchSignatures ()
#4  0x00007f3e70a04b53 in Detect ()
#5  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#6  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#7  0x00007f3e70b01b6b in AFPReadFromRing ()
#8  0x00007f3e70b02bca in ReceiveAFPLoop ()
#9  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#10 0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#11 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 15 (Thread 0x7f3e6bf95700 (LWP 3320)):
#0  0x00007f3e6e03c8a8 in tolower () from /lib64/libc.so.6
#1  0x00007f3e70b84fb0 in SCACSearch ()
#2  0x00007f3e70a44359 in PacketPatternSearchWithStreamCtx ()
#3  0x00007f3e70a024c1 in DetectMpmPrefilter ()
#4  0x00007f3e70a03bad in SigMatchSignatures ()
#5  0x00007f3e70a04b53 in Detect ()
#6  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#7  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#8  0x00007f3e70b01b6b in AFPReadFromRing ()
#9  0x00007f3e70b02bca in ReceiveAFPLoop ()
#10 0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#11 0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#12 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 14 (Thread 0x7f3e6c9d6700 (LWP 3319)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 13 (Thread 0x7f3e65c3b700 (LWP 3325)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 12 (Thread 0x7f3e6b554700 (LWP 3321)):
#0  0x00007f3e70b84fb6 in SCACSearch ()
#1  0x00007f3e70a44359 in PacketPatternSearchWithStreamCtx ()
#2  0x00007f3e70a024c1 in DetectMpmPrefilter ()
#3  0x00007f3e70a03bad in SigMatchSignatures ()
#4  0x00007f3e70a04b53 in Detect ()
#5  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#6  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#7  0x00007f3e70b01b6b in AFPReadFromRing ()
#8  0x00007f3e70b02bca in ReceiveAFPLoop ()
#9  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#10 0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#11 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 11 (Thread 0x7f3e3e93d700 (LWP 3330)):
#0  0x00007f3e70a00f71 in SigMatchSignaturesBuildMatchArrayAddSignature ()
#1  0x00007f3e70a0166d in SigMatchSignaturesBuildMatchArraySIMD ()
#2  0x00007f3e70a0178d in SigMatchSignaturesBuildMatchArray ()
#3  0x00007f3e70a03bce in SigMatchSignatures ()
#4  0x00007f3e70a04b53 in Detect ()
#5  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#6  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#7  0x00007f3e70b01b6b in AFPReadFromRing ()
#8  0x00007f3e70b02bca in ReceiveAFPLoop ()
#9  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#10 0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#11 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 10 (Thread 0x7f3e6543a700 (LWP 3326)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 9 (Thread 0x7f3e6ab13700 (LWP 3322)):
#0  0x00007f3e70a01627 in SigMatchSignaturesBuildMatchArraySIMD ()
#1  0x00007f3e70a0178d in SigMatchSignaturesBuildMatchArray ()
#2  0x00007f3e70a03bce in SigMatchSignatures ()
#3  0x00007f3e70a04b53 in Detect ()
#4  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#5  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#6  0x00007f3e70b01b6b in AFPReadFromRing ()
#7  0x00007f3e70b02bca in ReceiveAFPLoop ()
#8  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#9  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#10 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 8 (Thread 0x7f3e3fdbf700 (LWP 3328)):
#0  0x00007f3e70a016e6 in SigMatchSignaturesBuildMatchArraySIMD ()
#1  0x00007f3e70a0178d in SigMatchSignaturesBuildMatchArray ()
#2  0x00007f3e70a03bce in SigMatchSignatures ()
#3  0x00007f3e70a04b53 in Detect ()
#4  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#5  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#6  0x00007f3e70b01b6b in AFPReadFromRing ()
#7  0x00007f3e70b02bca in ReceiveAFPLoop ()
#8  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#9  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#10 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 7 (Thread 0x7f3e275be700 (LWP 3335)):
#0  0x00007f3e6f8870de in pthread_cond_timedwait () from /lib64/libpthread.so.0
#1  0x00007f3e70ac62ef in FlowManagerThread ()
#2  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#3  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 6 (Thread 0x7f3e70949740 (LWP 3266)):
#0  0x00007f3e6e0c7d2d in nanosleep () from /lib64/libc.so.6
#1  0x00007f3e6e0f15c4 in usleep () from /lib64/libc.so.6
#2  0x00007f3e70b3234d in main ()

Thread 5 (Thread 0x7f3e3f37e700 (LWP 3329)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 4 (Thread 0x7f3e26dbd700 (LWP 3336)):
#0  0x00007f3e6f8870de in pthread_cond_timedwait () from /lib64/libpthread.so.0
#1  0x00007f3e709d2538 in SCPerfWakeupThread ()
#2  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#3  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 3 (Thread 0x7f3e3defc700 (LWP 3331)):
#0  0x00007f3e6e0ee66d in poll () from /lib64/libc.so.6
#1  0x00007f3e70b0279a in ReceiveAFPLoop ()
#2  0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#3  0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#4  0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x7f3e3ca7a700 (LWP 3333)):
#0  0x00007f3e6e03c8ba in tolower () from /lib64/libc.so.6
#1  0x00007f3e70b84fb0 in SCACSearch ()
#2  0x00007f3e70a44359 in PacketPatternSearchWithStreamCtx ()
#3  0x00007f3e70a024c1 in DetectMpmPrefilter ()
#4  0x00007f3e70a03bad in SigMatchSignatures ()
#5  0x00007f3e70a04b53 in Detect ()
#6  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#7  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#8  0x00007f3e70b01b6b in AFPReadFromRing ()
#9  0x00007f3e70b02bca in ReceiveAFPLoop ()
#10 0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#11 0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#12 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7f3e3d4bb700 (LWP 3332)):
#0  0x0000000000000000 in ?? ()
#1  0x00007f3e709a5308 in AppLayerGetTxCnt ()
#2  0x00007f3e709aaf43 in AppLayerTransactionUpdateInspectId ()
#3  0x00007f3e70a5d14a in DeStateUpdateInspectTransactionId ()
#4  0x00007f3e70a0453d in SigMatchSignatures ()
#5  0x00007f3e70a04b53 in Detect ()
#6  0x00007f3e70b3b19a in TmThreadsSlotVarRun ()
#7  0x00007f3e70aff570 in TmThreadsSlotProcessPkt ()
#8  0x00007f3e70b01b6b in AFPReadFromRing ()
#9  0x00007f3e70b02bca in ReceiveAFPLoop ()
#10 0x00007f3e70b3ba22 in TmThreadsSlotPktAcqLoop ()
#11 0x00007f3e6f882f3a in start_thread () from /lib64/libpthread.so.0
#12 0x00007f3e6e0f83ed in clone () from /lib64/libc.so.6


More information about the Oisf-users mailing list