[Oisf-users] Suricata process goes down from time to time

[Victor Julien]

On 06/10/2013 09:38 AM, C. L. Martinez wrote:
> On Mon, Jun 10, 2013 at 7:38 AM, Peter Manev <petermanev at gmail.com> wrote:
>> On Mon, Jun 10, 2013 at 9:36 AM, C. L. Martinez <carlopmart at gmail.com> wrote:
>>> Hi all,
>>>
>>>  I have installed Suricata 1.4.2 in an OpenBSD 5.3 amd64 host. From
>>> time to time, suricata goes down and I suspect that the problem maybe
>>> is with memcap options but I am not to be sure.
>>>
>>>  It doesn't produces any core dump, only goes down ... How can I debug this??
>>> _______________________________________________
>>> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>>> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
>>> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>>> OISF: http://www.openinfosecfoundation.org/
>>
>>
>> Hi ,
>>
>> What do you mean "goes down" - stops/exits?
>>
>> thanks
>>
>>
>> --
>> Regards,
>> Peter Manev
> 
> stops ... and no log error is produced ...

The first thing I'd check if there is anything logged in the system
logs. In Linux a crashing program is often logged in dmesg for example,
maybe openbsd does something similar?

Also, try not daemonizing suricata, but run it in the foreground. Then
you'll see if suri prints some error.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------