Project

General

Profile

Bug #1189 » BUGS.txt

Peter Manev, 05/01/2014 10:10 AM

 


root@suricata:~/oisf# suricata --build-info
This is Suricata version 2.0dev (rev 6fbb955)
Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 PF_RING AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LIBJANSSON
SIMD support: SSE_4_2 SSE_4_1 SSE_3
Atomic intrisics: 1 2 4 8 16 byte(s)
64-bits, Little-endian architecture
GCC version 4.6.3, C version 199901
compiled with -fstack-protector
compiled with _FORTIFY_SOURCE=2
L1 cache line size (CLS)=64
compiled with LibHTP v0.5.11, linked against LibHTP v0.5.11
Suricata Configuration:
AF_PACKET support: yes
PF_RING support: yes
NFQueue support: no
IPFW support: no
DAG enabled: no
Napatech enabled: no
Unix socket enabled: yes
Detection enabled: yes

libnss support: yes
libnspr support: yes
libjansson support: yes
Prelude support: no
PCRE jit: no
libluajit: no
libgeoip: no
Non-bundled htp: no
Old barnyard2 support: no
CUDA enabled: no

Suricatasc install: yes

Unit tests enabled: no
Debug output enabled: no
Debug validation enabled: no
Profiling enabled: no
Profiling locks enabled: no
Coccinelle / spatch: yes

Generic build parameters:
Installation prefix (--prefix): /usr/local
Configuration directory (--sysconfdir): /usr/local/etc/suricata/
Log directory (--localstatedir) : /usr/local/var/log/suricata/

Host: x86_64-unknown-linux-gnu
GCC binary: gcc
GCC Protect enabled: no
GCC march native enabled: yes
GCC Profile enabled: no
root@suricata:~/oisf#







CORE DUMP

[New LWP 2407]

warning: Can't read pathname for load map: Input/output error.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `suricata --pfring-int=eth3 --pfring-cluster-id=99 --pfring-cluster-type=cluster'.
Program terminated with signal 6, Aborted.
#0 0x00007f4bb5642425 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) thread apply all bt

Thread 21 (Thread 0x7f4adf7fe700 (LWP 2407)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61
#3 0x0000000000524749 in TmqhOutputPacketpool (t=<optimized out>, p=0xc322f90) at tmqh-packetpool.c:183
#4 0x0000000000510da7 in TmThreadsSlotProcessPkt (p=0xc322f90, s=0xa867a430, tv=0xf157d760) at tm-threads.h:156
#5 ReceivePfringLoop (tv=0xf157d760, data=0x7f4ac80008c0, slot=<optimized out>) at source-pfring.c:362
#6 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xf157d760) at tm-threads.c:703
#7 0x00007f4bb6379e9a in start_thread (arg=0x7f4adf7fe700) at pthread_create.c:308
#8 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#9 0x0000000000000000 in ?? ()

Thread 20 (Thread 0x7f4b37fff700 (LWP 2399)):
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f4b30014110, buf=0x9b09d76 "3\023촾c\273\221\352\351\304\017\247\254\220O", buflen=1440)
at util-mpm-ac.c:1231
#1 0x000000000045d893 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, has_state=<optimized out>, alproto=0, flags=4 '\004', p=0x9b09590, smsg=0x0, det_ctx=0x7f4b30014040,
de_ctx=0xa1d8b040) at detect.c:983
#2 SigMatchSignatures (th_v=0xaf950d50, de_ctx=0xa1d8b040, det_ctx=0x7f4b30014040, p=0x9b09590) at detect.c:1319
#3 0x000000000045de15 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1730
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1702
#5 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xaf950d50, p=0x9b09590, slot=<optimized out>) at tm-threads.c:559
#6 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x9b09590, s=0x1032560b0, tv=0xaf950d50) at tm-threads.h:142
#7 ReceivePfringLoop (tv=0xaf950d50, data=0x7f4b300008c0, slot=<optimized out>) at source-pfring.c:362
#8 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xaf950d50) at tm-threads.c:703
#9 0x00007f4bb6379e9a in start_thread (arg=0x7f4b37fff700) at pthread_create.c:308
#10 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#11 0x0000000000000000 in ?? ()

Thread 19 (Thread 0x7f4b74fb8700 (LWP 2398)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xd164670) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0xd164670) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0xfb40cb80, dtv=<optimized out>, p=0xd164670, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0xfb40cb80, dtv=0x7f4b4c011460, p=0xd164670, pkt=0x7f45ca4cc17e "E", len=<optimized out>, pq=0x10344c980) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0xfb40cb80, dtv=0x7f4b4c011460, p=0xd164670, pkt=0x7f45ca4cc170 "x\376=\273g\300d\207\210b\207\301\b", len=1466, pq=0x10344c980)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0x10344c980, data=0x7f4b4c011460, p=0xd164670, tv=0xfb40cb80, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0xfb40cb80, p=0xd164670, data=0x7f4b4c011460, pq=0x10344c980, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xfb40cb80, p=0xd164670, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xd164670, s=0x10344c940, tv=0xfb40cb80) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0xfb40cb80, data=0x7f4b4c0008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xfb40cb80) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b74fb8700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
---Type <return> to continue, or q <return> to quit---
#16 0x0000000000000000 in ?? ()

Thread 18 (Thread 0x7f4b35ffb700 (LWP 2403)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xef87e00) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0xef87e00) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0x1014e27e0, dtv=<optimized out>, p=0xef87e00, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0x1014e27e0, dtv=0x7f4b0c011460, p=0xef87e00, pkt=0x7f45cd921bde "E", len=<optimized out>, pq=0xa2e2d470) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0x1014e27e0, dtv=0x7f4b0c011460, p=0xef87e00, pkt=0x7f45cd921bd0 "x\376=\273g\300d\207\210b\207\301\b", len=1494, pq=0xa2e2d470)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0xa2e2d470, data=0x7f4b0c011460, p=0xef87e00, tv=0x1014e27e0, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0x1014e27e0, p=0xef87e00, data=0x7f4b0c011460, pq=0xa2e2d470, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x1014e27e0, p=0xef87e00, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xef87e00, s=0xa2e2d430, tv=0x1014e27e0) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0x1014e27e0, data=0x7f4b0c0008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x1014e27e0) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b35ffb700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 17 (Thread 0x7f4ade7fc700 (LWP 2409)):
#0 __lll_unlock_wake () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:368
#1 0x00007f4bb637d104 in _L_unlock_644 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637d063 in __pthread_mutex_unlock_usercnt (mutex=<optimized out>, decr=<optimized out>) at pthread_mutex_unlock.c:52
#3 __pthread_mutex_unlock (mutex=0x145834c0) at pthread_mutex_unlock.c:290
#4 0x00000000004e923e in JsonSshCondition (tv=<optimized out>, p=0x3826510) at output-json-ssh.c:306
#5 0x00000000004eb80a in OutputPacketLog (tv=0x100cb6a10, p=0x3826510, thread_data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at output-packet.c:100
#6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x100cb6a10, p=0x3826510, slot=<optimized out>) at tm-threads.c:559
#7 0x000000000052622f in TmThreadsSlotVarRun (tv=0x100cb6a10, p=0x6e65240, slot=<optimized out>) at tm-threads.c:585
#8 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x6e65240, s=0xacd88fe0, tv=0x100cb6a10) at tm-threads.h:142
#9 ReceivePfringLoop (tv=0x100cb6a10, data=0x7f4ab00008c0, slot=<optimized out>) at source-pfring.c:362
#10 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x100cb6a10) at tm-threads.c:703
#11 0x00007f4bb6379e9a in start_thread (arg=0x7f4ade7fc700) at pthread_create.c:308
#12 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#13 0x0000000000000000 in ?? ()

Thread 16 (Thread 0x7f4addffb700 (LWP 2410)):
#0 0x00007f4bb56f9763 in select () at ../sysdeps/unix/syscall-template.S:82
#1 0x000000000052d910 in UnixMain (this=0x809fe0) at unix-manager.c:508
#2 0x000000000052e60a in UnixManagerThread (td=0xea148ce0) at unix-manager.c:867
#3 0x00007f4bb6379e9a in start_thread (arg=0x7f4addffb700) at pthread_create.c:308
#4 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5 0x0000000000000000 in ?? ()

Thread 15 (Thread 0x7f4b75fba700 (LWP 2396)):
---Type <return> to continue, or q <return> to quit---
#0 0x0000000000442bef in SCPerfCounterIncr (id=<optimized out>, pca=0x7f4b643ad910) at counters.c:92
#1 0x000000000051edb2 in StreamTcpGetSegment (ra_ctx=0x7f4b64013580, tv=0x10340ba20, len=<optimized out>) at stream-tcp-reassemble.c:3800
#2 StreamTcpGetSegment (tv=0x10340ba20, ra_ctx=0x7f4b64013580, len=<optimized out>) at stream-tcp-reassemble.c:3778
#3 0x000000000051fd4c in StreamTcpReassembleHandleSegmentHandleData (tv=0x10340ba20, ra_ctx=0x7f4b64013580, ssn=<optimized out>, stream=0x7f45c0729398, p=0xf4a5990)
at stream-tcp-reassemble.c:1873
#4 0x00000000005202cf in StreamTcpReassembleHandleSegment (tv=0x10340ba20, ra_ctx=0x7f4b64013580, ssn=0x7f45c0729390, stream=0x7f45c0729398, p=0xf4a5990, pq=<optimized out>)
at stream-tcp-reassemble.c:3601
#5 0x0000000000518e63 in StreamTcpPacketStateTimeWait (tv=0x10340ba20, p=0xf4a5990, ssn=0x7f45c0729390, pq=0x7f4b64012ea0, stt=<optimized out>) at stream-tcp.c:4013
#6 0x000000000051993a in StreamTcpPacket (tv=0x10340ba20, p=0xf4a5990, stt=0x7f4b64012e90, pq=0xee9ab280) at stream-tcp.c:4295
#7 0x000000000051a9bc in StreamTcp (tv=0x10340ba20, p=0xf4a5990, data=0x7f4b64012e90, pq=0xee9ab280, postpq=<optimized out>) at stream-tcp.c:4507
#8 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x10340ba20, p=0xf4a5990, slot=<optimized out>) at tm-threads.c:559
#9 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xf4a5990, s=0x1061f0d70, tv=0x10340ba20) at tm-threads.h:142
#10 ReceivePfringLoop (tv=0x10340ba20, data=0x7f4b640008c0, slot=<optimized out>) at source-pfring.c:362
#11 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x10340ba20) at tm-threads.c:703
#12 0x00007f4bb6379e9a in start_thread (arg=0x7f4b75fba700) at pthread_create.c:308
#13 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#14 0x0000000000000000 in ?? ()

Thread 14 (Thread 0x7f4b367fc700 (LWP 2402)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xeeba900) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0xeeba900) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0x105912220, dtv=<optimized out>, p=0xeeba900, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0x105912220, dtv=0x7f4b08011460, p=0xeeba900, pkt=0x7f49df62b6be "E", len=<optimized out>, pq=0xfa5a4280) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0x105912220, dtv=0x7f4b08011460, p=0xeeba900, pkt=0x7f49df62b6b0 "x\376=\273g\300d\207\210b\207\301\b", len=1502, pq=0xfa5a4280)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0xfa5a4280, data=0x7f4b08011460, p=0xeeba900, tv=0x105912220, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0x105912220, p=0xeeba900, data=0x7f4b08011460, pq=0xfa5a4280, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x105912220, p=0xeeba900, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xeeba900, s=0xfa5a4240, tv=0x105912220) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0x105912220, data=0x7f4b080008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x105912220) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b367fc700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 13 (Thread 0x7f4adcff9700 (LWP 2412)):
#0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215
#1 0x0000000000440b82 in SCPerfWakeupThread (arg=0x10f4a2880) at counters.c:408
#2 0x00007f4bb6379e9a in start_thread (arg=0x7f4adcff9700) at pthread_create.c:308
#3 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4 0x0000000000000000 in ?? ()

Thread 12 (Thread 0x7f4aa7fff700 (LWP 2413)):
#0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215
---Type <return> to continue, or q <return> to quit---
#1 0x0000000000444532 in SCPerfMgmtThread (arg=0x10f4a2b20) at counters.c:340
#2 0x00007f4bb6379e9a in start_thread (arg=0x7f4aa7fff700) at pthread_create.c:308
#3 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4 0x0000000000000000 in ?? ()

Thread 11 (Thread 0x7f4b377fe700 (LWP 2400)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61
#3 0x000000000045ca6f in SigMatchSignatures (th_v=0xfee94c20, de_ctx=0xa1d8b040, det_ctx=0x7f4b20014040, p=0x6082ab0) at detect.c:1606
#4 0x000000000045de15 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1730
#5 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1702
#6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xfee94c20, p=0x6082ab0, slot=<optimized out>) at tm-threads.c:559
#7 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x6082ab0, s=0xad6d18f0, tv=0xfee94c20) at tm-threads.h:142
#8 ReceivePfringLoop (tv=0xfee94c20, data=0x7f4b200008c0, slot=<optimized out>) at source-pfring.c:362
#9 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xfee94c20) at tm-threads.c:703
#10 0x00007f4bb6379e9a in start_thread (arg=0x7f4b377fe700) at pthread_create.c:308
#11 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#12 0x0000000000000000 in ?? ()

Thread 10 (Thread 0x7f4b76fbc700 (LWP 2394)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61
#3 0x000000000045ca6f in SigMatchSignatures (th_v=0xaf89df00, de_ctx=0xa1d8b040, det_ctx=0x7f4b700140a0, p=0x40212d0) at detect.c:1606
#4 0x000000000045de15 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1730
#5 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1702
#6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xaf89df00, p=0x40212d0, slot=<optimized out>) at tm-threads.c:559
#7 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x40212d0, s=0x104d6dfa0, tv=0xaf89df00) at tm-threads.h:142
#8 ReceivePfringLoop (tv=0xaf89df00, data=0x7f4b700008c0, slot=<optimized out>) at source-pfring.c:362
#9 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xaf89df00) at tm-threads.c:703
#10 0x00007f4bb6379e9a in start_thread (arg=0x7f4b76fbc700) at pthread_create.c:308
#11 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#12 0x0000000000000000 in ?? ()

Thread 9 (Thread 0x7f4b767bb700 (LWP 2395)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0x10683ca0) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0x10683ca0) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0x105ae7540, dtv=<optimized out>, p=0x10683ca0, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0x105ae7540, dtv=0x7f4b60011460, p=0x10683ca0, pkt=0x7f4969c9912e "E", len=<optimized out>, pq=0x101a064d0) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0x105ae7540, dtv=0x7f4b60011460, p=0x10683ca0, pkt=0x7f4969c99120 "x\376=\273g\300d\207\210b\207\301\b", len=1466, pq=0x101a064d0)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0x101a064d0, data=0x7f4b60011460, p=0x10683ca0, tv=0x105ae7540, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0x105ae7540, p=0x10683ca0, data=0x7f4b60011460, pq=0x101a064d0, postpq=<optimized out>) at source-pfring.c:602
---Type <return> to continue, or q <return> to quit---
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x105ae7540, p=0x10683ca0, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x10683ca0, s=0x101a06490, tv=0x105ae7540) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0x105ae7540, data=0x7f4b600008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x105ae7540) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b767bb700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 8 (Thread 0x7f4bb7452840 (LWP 2393)):
#0 0x00007f4bb56cc08d in nanosleep () at ../sysdeps/unix/syscall-template.S:82
#1 0x00007f4bb56f9eb4 in usleep (useconds=<optimized out>) at ../sysdeps/unix/sysv/linux/usleep.c:33
#2 0x00000000004114f7 in main (argc=<optimized out>, argv=<optimized out>) at suricata.c:2307

Thread 7 (Thread 0x7f4b757b9700 (LWP 2397)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0x3758260) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0x3758260) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0x103297c90, dtv=<optimized out>, p=0x3758260, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0x103297c90, dtv=0x7f4b48011460, p=0x3758260, pkt=0x7f4824c5850e "E", len=<optimized out>, pq=0xfffc32e0) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0x103297c90, dtv=0x7f4b48011460, p=0x3758260, pkt=0x7f4824c58500 "x\376=\273g\300d\207\210b\207\301\b", len=1322, pq=0xfffc32e0)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0xfffc32e0, data=0x7f4b48011460, p=0x3758260, tv=0x103297c90, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0x103297c90, p=0x3758260, data=0x7f4b48011460, pq=0xfffc32e0, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x103297c90, p=0x3758260, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x3758260, s=0xfffc32a0, tv=0x103297c90) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0x103297c90, data=0x7f4b480008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x103297c90) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b757b9700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 6 (Thread 0x7f4add7fa700 (LWP 2411)):
#0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215
#1 0x00000000004cefe9 in FlowManagerThread (td=0x108fb87d0) at flow-manager.c:545
#2 0x00007f4bb6379e9a in start_thread (arg=0x7f4add7fa700) at pthread_create.c:308
#3 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#4 0x0000000000000000 in ?? ()

Thread 5 (Thread 0x7f4b34ff9700 (LWP 2405)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61
#3 0x00000000004ce3cf in FlowGetFlowFromHash (p=0x61f5f10) at flow-hash.c:590
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0x61f5f10) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0xb99f8400, dtv=<optimized out>, p=0x61f5f10, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
---Type <return> to continue, or q <return> to quit---
#6 0x000000000044750e in DecodeIPV4 (tv=0xb99f8400, dtv=0x7f4af4011460, p=0x61f5f10, pkt=0x7f463c327fee "E", len=<optimized out>, pq=0xc3b07a10) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0xb99f8400, dtv=0x7f4af4011460, p=0x61f5f10, pkt=0x7f463c327fe0 "x\376=\273g\300d\207\210b\207\301\b", len=174, pq=0xc3b07a10)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0xc3b07a10, data=0x7f4af4011460, p=0x61f5f10, tv=0xb99f8400, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0xb99f8400, p=0x61f5f10, data=0x7f4af4011460, pq=0xc3b07a10, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xb99f8400, p=0x61f5f10, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x61f5f10, s=0xc3b079d0, tv=0xb99f8400) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0xb99f8400, data=0x7f4af40008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xb99f8400) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b34ff9700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 4 (Thread 0x7f4adeffd700 (LWP 2408)):
#0 __lll_unlock_wake () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:368
#1 0x00007f4bb637d104 in _L_unlock_644 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637d063 in __pthread_mutex_unlock_usercnt (mutex=<optimized out>, decr=<optimized out>) at pthread_mutex_unlock.c:52
#3 __pthread_mutex_unlock (mutex=0x145834c0) at pthread_mutex_unlock.c:290
#4 0x00000000004e923e in JsonSshCondition (tv=<optimized out>, p=0xc3668e0) at output-json-ssh.c:306
#5 0x00000000004eb80a in OutputPacketLog (tv=0xbfee25d0, p=0xc3668e0, thread_data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at output-packet.c:100
#6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xbfee25d0, p=0xc3668e0, slot=<optimized out>) at tm-threads.c:559
#7 0x000000000052622f in TmThreadsSlotVarRun (tv=0xbfee25d0, p=0x8160340, slot=<optimized out>) at tm-threads.c:585
#8 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x8160340, s=0xabe2a1a0, tv=0xbfee25d0) at tm-threads.h:142
#9 ReceivePfringLoop (tv=0xbfee25d0, data=0x7f4acc0008c0, slot=<optimized out>) at source-pfring.c:362
#10 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xbfee25d0) at tm-threads.c:703
#11 0x00007f4bb6379e9a in start_thread (arg=0x7f4adeffd700) at pthread_create.c:308
#12 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#13 0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7f4b357fa700 (LWP 2404)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xca806d0) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0xca806d0) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0xd2da6c60, dtv=<optimized out>, p=0xca806d0, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0xd2da6c60, dtv=0x7f4af0011460, p=0xca806d0, pkt=0x7f46bb7cbbae "E", len=<optimized out>, pq=0xa2e255e0) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0xd2da6c60, dtv=0x7f4af0011460, p=0xca806d0, pkt=0x7f46bb7cbba0 "x\376=\273g\300d\207\210b\207\301\b", len=1480, pq=0xa2e255e0)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0xa2e255e0, data=0x7f4af0011460, p=0xca806d0, tv=0xd2da6c60, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0xd2da6c60, p=0xca806d0, data=0x7f4af0011460, pq=0xa2e255e0, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xd2da6c60, p=0xca806d0, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xca806d0, s=0xa2e255a0, tv=0xd2da6c60) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0xd2da6c60, data=0x7f4af00008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xd2da6c60) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b357fa700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
---Type <return> to continue, or q <return> to quit---
#16 0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f4adffff700 (LWP 2406)):
#0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132
#1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0
#2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61
#3 0x00000000004cde4d in FlowGetFlowFromHash (p=0x3e3f8c0) at flow-hash.c:499
#4 0x00000000004cc301 in FlowHandlePacket (tv=<optimized out>, p=0x3e3f8c0) at flow.c:242
#5 0x00000000004495ee in DecodeTCP (tv=0x103453c30, dtv=<optimized out>, p=0x3e3f8c0, pkt=<optimized out>, len=<optimized out>, pq=<optimized out>) at decode-tcp.c:206
#6 0x000000000044750e in DecodeIPV4 (tv=0x103453c30, dtv=0x7f4ad8011460, p=0x3e3f8c0, pkt=0x7f461571941e "E", len=<optimized out>, pq=0xa3524830) at decode-ipv4.c:557
#7 0x0000000000445db5 in DecodeEthernet (tv=0x103453c30, dtv=0x7f4ad8011460, p=0x3e3f8c0, pkt=0x7f4615719410 "x\376=\273g\300d\207\210b\207\301\b", len=1358, pq=0xa3524830)
at decode-ethernet.c:60
#8 0x00000000005109e4 in DecodePfring (pq=0xa3524830, data=0x7f4ad8011460, p=0x3e3f8c0, tv=0x103453c30, postpq=<optimized out>) at source-pfring.c:630
#9 DecodePfring (tv=0x103453c30, p=0x3e3f8c0, data=0x7f4ad8011460, pq=0xa3524830, postpq=<optimized out>) at source-pfring.c:602
#10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x103453c30, p=0x3e3f8c0, slot=<optimized out>) at tm-threads.c:559
#11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x3e3f8c0, s=0xa35247f0, tv=0x103453c30) at tm-threads.h:142
#12 ReceivePfringLoop (tv=0x103453c30, data=0x7f4ad80008c0, slot=<optimized out>) at source-pfring.c:362
#13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x103453c30) at tm-threads.c:703
#14 0x00007f4bb6379e9a in start_thread (arg=0x7f4adffff700) at pthread_create.c:308
#15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7f4b36ffd700 (LWP 2401)):
#0 0x00007f4bb5642425 in __GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1 0x00007f4bb5645b8b in __GI_abort () at abort.c:91
#2 0x00007f4bb563b0ee in __assert_fail_base (fmt=<optimized out>, assertion=0x58cd28 "!(1)", file=0x58d323 "app-layer-htp.c", line=<optimized out>, function=<optimized out>)
at assert.c:94
#3 0x00007f4bb563b192 in __GI___assert_fail (assertion=0x58cd28 "!(1)", file=0x58d323 "app-layer-htp.c", line=787, function=0x58e600 "HTPHandleResponseData") at assert.c:103
#4 0x000000000042ddb0 in HTPHandleResponseData (f=<optimized out>, htp_state=<optimized out>, pstate=<optimized out>, input=<optimized out>, input_len=<optimized out>,
local_data=<optimized out>) at app-layer-htp.c:787
#5 0x0000000000433862 in AppLayerParserParse (alp_tctx=<optimized out>, f=0x1e556d10, alproto=1, flags=11 '\v', input=<optimized out>, input_len=<optimized out>)
at app-layer-parser.c:821
#6 0x000000000041c97a in AppLayerHandleTCPData (tv=0x10986f900, ra_ctx=0x7f4b24013580, p=0x5c152c0, f=0x1e556d10, ssn=0x7f45bd466ed0, stream=0x7f45bd466ed8,
data=0x7f4b36ffa920 "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nExpires: Thu, 01 May 2014 13:32:05 GMT\r\nLocation: http://dmd.metaservices.microsoft.com/dms/metadata.svc\r\nServer: Mi"..., data_len=500, flags=11 '\v') at app-layer.c:288
#7 0x000000000051dc99 in StreamTcpReassembleAppLayer (tv=0x10986f900, ra_ctx=0x7f4b24013580, ssn=0x7f45bd466ed0, stream=0x7f45bd466ed8, p=0x5c152c0) at stream-tcp-reassemble.c:3215
#8 0x000000000051e590 in StreamTcpReassembleHandleSegmentUpdateACK (tv=0x10986f900, ra_ctx=0x7f4b24013580, ssn=0x7f45bd466ed0, stream=0x7f45bd466ed8, p=0x5c152c0)
at stream-tcp-reassemble.c:3562
#9 0x000000000051fee3 in StreamTcpReassembleHandleSegment (tv=0x10986f900, ra_ctx=0x7f4b24013580, ssn=0x7f45bd466ed0, stream=0x7f45bd466f20, p=0x5c152c0, pq=<optimized out>)
at stream-tcp-reassemble.c:3590
#10 0x0000000000515b12 in HandleEstablishedPacketToClient (pq=<optimized out>, p=<optimized out>, ssn=<optimized out>, tv=<optimized out>, stt=<optimized out>) at stream-tcp.c:2091
#11 StreamTcpPacketStateEstablished (tv=0x10986f900, p=0x5c152c0, stt=0x7f4b24012e90, ssn=0x7f45bd466ed0, pq=0x7f4b24012ea0) at stream-tcp.c:2337
#12 0x00000000005197ae in StreamTcpPacket (tv=0x10986f900, p=0x5c152c0, stt=0x7f4b24012e90, pq=0xa2e24820) at stream-tcp.c:4265
#13 0x000000000051a9bc in StreamTcp (tv=0x10986f900, p=0x5c152c0, data=0x7f4b24012e90, pq=0xa2e24820, postpq=<optimized out>) at stream-tcp.c:4507
#14 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x10986f900, p=0x5c152c0, slot=<optimized out>) at tm-threads.c:559
#15 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x5c152c0, s=0x109ce07a0, tv=0x10986f900) at tm-threads.h:142
#16 ReceivePfringLoop (tv=0x10986f900, data=0x7f4b240008c0, slot=<optimized out>) at source-pfring.c:362
---Type <return> to continue, or q <return> to quit---
#17 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x10986f900) at tm-threads.c:703
#18 0x00007f4bb6379e9a in start_thread (arg=0x7f4b36ffd700) at pthread_create.c:308
#19 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#20 0x0000000000000000 in ?? ()
(gdb)
(gdb)
    (1-1/1)