|
[root@p3pltestids003 /]# gdb -p 1
|
|
GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-80.el7
|
|
Copyright (C) 2013 Free Software Foundation, Inc.
|
|
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
|
|
This is free software: you are free to change and redistribute it.
|
|
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
|
|
and "show warranty" for details.
|
|
This GDB was configured as "x86_64-redhat-linux-gnu".
|
|
For bug reporting instructions, please see:
|
|
<http://www.gnu.org/software/gdb/bugs/>.
|
|
Attaching to process 1
|
|
Reading symbols from /usr/bin/suricata...done.
|
|
Reading symbols from /lib64/libjemalloc.so...Reading symbols from /usr/lib/debug/usr/lib64/libjemalloc.so.1.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libjemalloc.so
|
|
Reading symbols from /usr/lib/libhtp-0.5.18.so.1...done.
|
|
Loaded symbols for /usr/lib/libhtp-0.5.18.so.1
|
|
Reading symbols from /lib64/libhiredis.so.0.12...Reading symbols from /usr/lib/debug/usr/lib64/libhiredis.so.0.12.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libhiredis.so.0.12
|
|
Reading symbols from /lib64/libGeoIP.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libGeoIP.so.1.5.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libGeoIP.so.1
|
|
Reading symbols from /lib64/libluajit-5.1.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libluajit-5.1.so.2.0.4.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libluajit-5.1.so.2
|
|
Reading symbols from /lib64/libmagic.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libmagic.so.1.0.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libmagic.so.1
|
|
Reading symbols from /lib64/libcap-ng.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libcap-ng.so.0.0.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libcap-ng.so.0
|
|
Reading symbols from /lib64/libpcap.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libpcap.so.1.5.3.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libpcap.so.1
|
|
Reading symbols from /lib64/libnet.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libnet.so.1.7.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnet.so.1
|
|
Reading symbols from /lib64/libnetfilter_queue.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libnetfilter_queue.so.1.3.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnetfilter_queue.so.1
|
|
Reading symbols from /lib64/libnfnetlink.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libnfnetlink.so.0.2.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnfnetlink.so.0
|
|
Reading symbols from /lib64/libjansson.so.4...Reading symbols from /usr/lib/debug/usr/lib64/libjansson.so.4.4.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libjansson.so.4
|
|
Reading symbols from /lib64/libyaml-0.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libyaml-0.so.2.0.4.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libyaml-0.so.2
|
|
Reading symbols from /lib64/libpcre.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libpcre.so.1.2.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libpcre.so.1
|
|
Reading symbols from /lib64/libssl3.so...Reading symbols from /usr/lib/debug/usr/lib64/libssl3.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libssl3.so
|
|
Reading symbols from /lib64/libsmime3.so...Reading symbols from /usr/lib/debug/usr/lib64/libsmime3.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libsmime3.so
|
|
Reading symbols from /lib64/libnss3.so...Reading symbols from /usr/lib/debug/usr/lib64/libnss3.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnss3.so
|
|
Reading symbols from /lib64/libnssutil3.so...Reading symbols from /usr/lib/debug/usr/lib64/libnssutil3.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnssutil3.so
|
|
Reading symbols from /lib64/libplds4.so...Reading symbols from /usr/lib/debug/usr/lib64/libplds4.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libplds4.so
|
|
Reading symbols from /lib64/libplc4.so...Reading symbols from /usr/lib/debug/usr/lib64/libplc4.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libplc4.so
|
|
Reading symbols from /lib64/libnspr4.so...Reading symbols from /usr/lib/debug/usr/lib64/libnspr4.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnspr4.so
|
|
Reading symbols from /lib64/libpthread.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libpthread-2.17.so.debug...done.
|
|
done.
|
|
[New LWP 211]
|
|
[New LWP 210]
|
|
[New LWP 209]
|
|
[New LWP 208]
|
|
[New LWP 207]
|
|
[New LWP 206]
|
|
[New LWP 205]
|
|
[New LWP 204]
|
|
[New LWP 203]
|
|
[New LWP 202]
|
|
[New LWP 201]
|
|
[New LWP 200]
|
|
[New LWP 199]
|
|
[New LWP 198]
|
|
[New LWP 197]
|
|
[New LWP 196]
|
|
[New LWP 195]
|
|
[New LWP 194]
|
|
[New LWP 193]
|
|
[New LWP 192]
|
|
[New LWP 191]
|
|
[New LWP 190]
|
|
[New LWP 189]
|
|
[New LWP 188]
|
|
[New LWP 187]
|
|
[New LWP 186]
|
|
[New LWP 185]
|
|
[New LWP 184]
|
|
[New LWP 183]
|
|
[New LWP 182]
|
|
[New LWP 181]
|
|
[New LWP 180]
|
|
[New LWP 179]
|
|
[New LWP 178]
|
|
[New LWP 177]
|
|
[New LWP 176]
|
|
[New LWP 175]
|
|
[New LWP 174]
|
|
[New LWP 173]
|
|
[New LWP 172]
|
|
[New LWP 171]
|
|
[New LWP 170]
|
|
[New LWP 169]
|
|
[New LWP 168]
|
|
[New LWP 167]
|
|
[Thread debugging using libthread_db enabled]
|
|
Using host libthread_db library "/lib64/libthread_db.so.1".
|
|
Loaded symbols for /lib64/libpthread.so.0
|
|
Reading symbols from /lib64/libdl.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libdl-2.17.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libdl.so.2
|
|
Reading symbols from /lib64/libc.so.6...Reading symbols from /usr/lib/debug/usr/lib64/libc-2.17.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libc.so.6
|
|
Reading symbols from /lib64/ld-linux-x86-64.so.2...Reading symbols from /usr/lib/debug/usr/lib64/ld-2.17.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/ld-linux-x86-64.so.2
|
|
Reading symbols from /lib64/libz.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libz.so.1.2.7.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libz.so.1
|
|
Reading symbols from /lib64/libm.so.6...Reading symbols from /usr/lib/debug/usr/lib64/libm-2.17.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libm.so.6
|
|
Reading symbols from /lib64/libgcc_s.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libgcc_s-4.8.5-20150702.so.1.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libgcc_s.so.1
|
|
Reading symbols from /lib64/libmnl.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libmnl.so.0.1.0.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libmnl.so.0
|
|
Reading symbols from /lib64/librt.so.1...Reading symbols from /usr/lib/debug/usr/lib64/librt-2.17.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/librt.so.1
|
|
Reading symbols from /lib64/libnss_files.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libnss_files-2.17.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libnss_files.so.2
|
|
Reading symbols from /lib64/libsoftokn3.so...Reading symbols from /usr/lib/debug/usr/lib64/libsoftokn3.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libsoftokn3.so
|
|
Reading symbols from /lib64/libsqlite3.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libsqlite3.so.0.8.6.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libsqlite3.so.0
|
|
Reading symbols from /lib64/libfreeblpriv3.so...Reading symbols from /usr/lib/debug/usr/lib64/libfreeblpriv3.so.debug...done.
|
|
done.
|
|
Loaded symbols for /lib64/libfreeblpriv3.so
|
|
0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81
|
|
81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
|
|
(gdb) cont
|
|
Continuing.
|
|
|
|
Program received signal SIGUSR2, User defined signal 2.
|
|
0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81
|
|
81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
|
|
(gdb) finish
|
|
Run till exit from #0 0x00007f5fc921849d in nanosleep ()
|
|
at ../sysdeps/unix/syscall-template.S:81
|
|
usleep (useconds=useconds@entry=10000)
|
|
at ../sysdeps/unix/sysv/linux/usleep.c:33
|
|
33 }
|
|
(gdb) thread apply all bt
|
|
|
|
Thread 46 (Thread 0x7f5f97fff700 (LWP 167)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f97ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100c900, data=0x7f5f973e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c900)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f97fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 45 (Thread 0x7f5f887ff700 (LWP 168)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f887fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa108eb00, data=0x7f5f87be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa108eb00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f887ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 44 (Thread 0x7f5f78fff700 (LWP 169)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f78ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa2714100, data=0x7f5f783e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa2714100)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f78fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 43 (Thread 0x7f5f697ff700 (LWP 170)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f697fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa26f6f00, data=0x7f5f68be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa26f6f00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f697ff700)
|
|
at pthread_create.c:308
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 42 (Thread 0x7f5f59fff700 (LWP 171)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f59ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa10fa000, data=0x7f5f593e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10fa000)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f59fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 41 (Thread 0x7f5f4a7ff700 (LWP 172)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5f48e9fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9f00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5f3b122000, p=p@entry=0x7f5f48e9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9f00, p=0x7f5f48e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9f00,
|
|
p=p@entry=0x7f5f48e9fe00, slot=slot@entry=0x7f5fa17bc780)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f48e9fe00,
|
|
s=0x7f5fa17bc780, tv=0x7f5fa10f9f00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5f49be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9f00,
|
|
data=0x7f5f49be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9f00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f4a7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 40 (Thread 0x7f5f3afff700 (LWP 173)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5f3969fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9e00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5f2b928000, p=p@entry=0x7f5f3969fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9e00, p=0x7f5f3969fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9e00,
|
|
p=p@entry=0x7f5f3969fe00, slot=slot@entry=0x7f5fa17bcf00)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f3969fe00,
|
|
s=0x7f5fa17bcf00, tv=0x7f5fa10f9e00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5f3a3e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9e00,
|
|
data=0x7f5f3a3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9e00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f3afff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 39 (Thread 0x7f5f2b7ff700 (LWP 174)):
|
|
#0 __lll_unlock_wake ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:371
|
|
#1 0x00007f5fc972ac53 in _L_unlock_697 () from /lib64/libpthread.so.0
|
|
#2 0x00007f5fc972abde in __pthread_mutex_unlock_usercnt (decr=1,
|
|
mutex=mutex@entry=0x7f578725d750) at pthread_mutex_unlock.c:52
|
|
#3 __GI___pthread_mutex_unlock (mutex=mutex@entry=0x7f578725d750)
|
|
at pthread_mutex_unlock.c:297
|
|
#4 0x000000000041922d in AppLayerHandleUdp (tv=tv@entry=0x7f5fa10f9d00,
|
|
tctx=0x7f5f2a80e040, p=p@entry=0x7f5f29e9e200, f=0x7f578725d700)
|
|
at app-layer.c:530
|
|
#5 0x000000000044d0a2 in DecodeUDP (tv=tv@entry=0x7f5fa10f9d00,
|
|
dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9e200,
|
|
pkt=0x7f57fed2e022 "", len=<optimized out>, pq=pq@entry=0x7f5fa17bd6c0)
|
|
at decode-udp.c:97
|
|
#6 0x000000000044ab5d in DecodeIPV4 (tv=tv@entry=0x7f5fa10f9d00,
|
|
dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9e200,
|
|
pkt=0x7f57fed2e00e "E", len=<optimized out>, pq=pq@entry=0x7f5fa17bd6c0)
|
|
at decode-ipv4.c:565
|
|
#7 0x000000000044ee6c in DefragInsertFrag (tv=tv@entry=0x7f5fa10f9d00,
|
|
dtv=dtv@entry=0x7f5f2abfa080, tracker=tracker@entry=0x7f5fc7d7fa80,
|
|
p=p@entry=0x7f5f29e9fe00, pq=pq@entry=0x7f5fa17bd6c0) at defrag.c:784
|
|
#8 0x000000000044f4d2 in Defrag (tv=tv@entry=0x7f5fa10f9d00,
|
|
dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9fe00,
|
|
pq=pq@entry=0x7f5fa17bd6c0) at defrag.c:947
|
|
#9 0x000000000044acbe in DecodeIPV4 (tv=tv@entry=0x7f5fa10f9d00,
|
|
dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9fe00,
|
|
pkt=pkt@entry=0x7f5c55739910 "E", len=len@entry=1139,
|
|
pq=pq@entry=0x7f5fa17bd6c0) at decode-ipv4.c:536
|
|
#10 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa10f9d00,
|
|
dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9fe00,
|
|
pkt=0x7f5c55739902 "@U9Y\325\242", len=<optimized out>,
|
|
pq=pq@entry=0x7f5fa17bd6c0) at decode-ethernet.c:60
|
|
#11 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa10f9d00, p=0x7f5f29e9fe00,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
data=0x7f5f2abfa080, pq=0x7f5fa17bd6c0, postpq=<optimized out>)
|
|
at source-af-packet.c:1847
|
|
#12 0x0000000000537239 in DecodeAFP (tv=<optimized out>, p=<optimized out>,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at source-af-packet.c:1827
|
|
#13 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9d00,
|
|
p=p@entry=0x7f5f29e9fe00, slot=slot@entry=0x7f5fa17bd680)
|
|
at tm-threads.c:132
|
|
#14 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f29e9fe00,
|
|
s=0x7f5fa17bd680, tv=0x7f5fa10f9d00) at tm-threads.h:149
|
|
#15 AFPReadFromRing (ptv=ptv@entry=0x7f5f2abe3140) at source-af-packet.c:874
|
|
#16 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9d00,
|
|
data=0x7f5f2abe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#17 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9d00)
|
|
at tm-threads.c:336
|
|
#18 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f2b7ff700)
|
|
at pthread_create.c:308
|
|
#19 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 38 (Thread 0x7f5f1bfff700 (LWP 175)):
|
|
#0 0x0000000000518b16 in OutputPacketLog (tv=0x7f5fa10f9c00,
|
|
p=0x7f5f1a69fe00, thread_data=0x7f5f1afff078, pq=0x7f5fa17be340,
|
|
postpq=0x0) at output-packet.c:93
|
|
#1 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9c00,
|
|
p=p@entry=0x7f5f1a69fe00, slot=slot@entry=0x7f5fa17bde00)
|
|
at tm-threads.c:132
|
|
#2 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f1a69fe00,
|
|
s=0x7f5fa17bde00, tv=0x7f5fa10f9c00) at tm-threads.h:149
|
|
#3 AFPReadFromRing (ptv=ptv@entry=0x7f5f1b3e3140) at source-af-packet.c:874
|
|
#4 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9c00,
|
|
data=0x7f5f1b3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#5 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9c00)
|
|
at tm-threads.c:336
|
|
#6 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f1bfff700)
|
|
at pthread_create.c:308
|
|
#7 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 37 (Thread 0x7f5f0c7ff700 (LWP 176)):
|
|
#0 0x0000000000553c6d in StreamTcpPruneSession (f=0x7f5fc5ca41c0,
|
|
flags=4 '\004') at stream-tcp-reassemble.c:2474
|
|
#1 0x000000000055d7f3 in TmqhOutputPacketpool (t=<optimized out>,
|
|
p=0x7f5f0ae9fe00) at tmqh-packetpool.c:454
|
|
#2 0x0000000000539477 in TmThreadsSlotProcessPkt (p=0x7f5f0ae9fe00,
|
|
s=0x7f5fa17be580, tv=0x7f5fa10f9b00) at tm-threads.h:163
|
|
#3 AFPReadFromRing (ptv=ptv@entry=0x7f5f0bbe3140) at source-af-packet.c:874
|
|
#4 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9b00,
|
|
data=0x7f5f0bbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#5 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9b00)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at tm-threads.c:336
|
|
#6 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f0c7ff700)
|
|
at pthread_create.c:308
|
|
#7 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 36 (Thread 0x7f5efcfff700 (LWP 177)):
|
|
#0 PacketAlertHandle (pos=0, p=0x7f5efb69fe00, s=0x7f5fc7c72000,
|
|
det_ctx=0x7f5eed92a000, de_ctx=0x7f5fa2dc7000)
|
|
at detect-engine-alert.c:116
|
|
#1 PacketAlertFinalize (de_ctx=de_ctx@entry=0x7f5fa2dc7000,
|
|
det_ctx=det_ctx@entry=0x7f5eed92a000, p=p@entry=0x7f5efb69fe00)
|
|
at detect-engine-alert.c:249
|
|
#2 0x0000000000461f44 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9a00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5eed92a000, p=p@entry=0x7f5efb69fe00)
|
|
at detect.c:1817
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa10f9a00, p=0x7f5efb69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9a00,
|
|
p=p@entry=0x7f5efb69fe00, slot=slot@entry=0x7f5fa17bed00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5efb69fe00,
|
|
s=0x7f5fa17bed00, tv=0x7f5fa10f9a00) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5efc3e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9a00,
|
|
data=0x7f5efc3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9a00)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5efcfff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 35 (Thread 0x7f5eed7ff700 (LWP 178)):
|
|
#0 DetectAddressMatchIPv4 (addrs=<optimized out>, addrs_cnt=<optimized out>,
|
|
a=a@entry=0x7f5eebe9fe14) at detect-engine-address.c:1659
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9900,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ede122000, p=p@entry=0x7f5eebe9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9900, p=0x7f5eebe9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9900,
|
|
p=p@entry=0x7f5eebe9fe00, slot=slot@entry=0x7f5fa17bf480)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eebe9fe00,
|
|
s=0x7f5fa17bf480, tv=0x7f5fa10f9900) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5eecbe3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9900,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
data=0x7f5eecbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9900)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eed7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 34 (Thread 0x7f5eddfff700 (LWP 179)):
|
|
#0 __lll_lock_wait ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:135
|
|
#1 0x00007f5fc9729d02 in _L_lock_791 () from /lib64/libpthread.so.0
|
|
#2 0x00007f5fc9729c08 in __GI___pthread_mutex_lock (
|
|
mutex=mutex@entry=0x7f5fc6b0ee00) at pthread_mutex_lock.c:64
|
|
#3 0x00000000004eb666 in HostGetHostFromHash (a=0x7f5edc69fe14) at host.c:468
|
|
#4 0x000000000049cfe5 in PacketAlertThreshold (
|
|
de_ctx=de_ctx@entry=0x7f5fa2dc7000, det_ctx=det_ctx@entry=0x7f5ece922000,
|
|
td=0x7f5fa2912b80, p=p@entry=0x7f5edc69fe00, s=s@entry=0x7f5fc7c74800)
|
|
at detect-engine-threshold.c:626
|
|
#5 0x0000000000478e46 in PacketAlertHandle (pos=0, p=0x7f5edc69fe00,
|
|
s=0x7f5fc7c74800, det_ctx=0x7f5ece922000, de_ctx=0x7f5fa2dc7000)
|
|
at detect-engine-alert.c:116
|
|
#6 PacketAlertFinalize (de_ctx=de_ctx@entry=0x7f5fa2dc7000,
|
|
det_ctx=det_ctx@entry=0x7f5ece922000, p=p@entry=0x7f5edc69fe00)
|
|
at detect-engine-alert.c:249
|
|
#7 0x0000000000461f44 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9800,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ece922000, p=p@entry=0x7f5edc69fe00)
|
|
at detect.c:1817
|
|
#8 0x0000000000463272 in Detect (tv=0x7f5fa10f9800, p=0x7f5edc69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#9 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9800,
|
|
p=p@entry=0x7f5edc69fe00, slot=slot@entry=0x7f5fa17bfc00)
|
|
at tm-threads.c:132
|
|
#10 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5edc69fe00,
|
|
s=0x7f5fa17bfc00, tv=0x7f5fa10f9800) at tm-threads.h:149
|
|
#11 AFPReadFromRing (ptv=ptv@entry=0x7f5edd3e3140) at source-af-packet.c:874
|
|
#12 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9800,
|
|
data=0x7f5edd3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#13 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9800)
|
|
at tm-threads.c:336
|
|
#14 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eddfff700)
|
|
at pthread_create.c:308
|
|
#15 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 33 (Thread 0x7f5ece7ff700 (LWP 180)):
|
|
#0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5ecce9fe14)
|
|
at detect-engine-address.c:1660
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9700,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ebf122000, p=p@entry=0x7f5ecce9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9700, p=0x7f5ecce9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9700,
|
|
p=p@entry=0x7f5ecce9fe00, slot=slot@entry=0x7f5fa17c0380)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5ecce9fe00,
|
|
s=0x7f5fa17c0380, tv=0x7f5fa10f9700) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5ecdbe3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9700,
|
|
data=0x7f5ecdbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9700)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ece7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 32 (Thread 0x7f5ebefff700 (LWP 181)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5eaf922130,
|
|
buf=0x7f5b829e9314 "\023>\275\216\023M4\035\315\267~\215\224\364Mq]\274\071\230V\336\227\306\217\254\225\245\064\232e\315\265`\313:g\352?>Z\323\222q\342\354\307\273\016/\211Y-\003\217\266m(c\266\304\030XF\343\026/\030\360}\005\223\220\201\330yH\017}\355k\r\366fZkHJ\373Oi@\327l_\210\364oW\020\334vA\354\235\220\217\314.DR\273\372\370\027\267\066\226C\275\345\320\333\025\335\345\345w\347R\322\305y\226\t\325\214\316\312/{\247r\271\022X0f[Tv\210|S\b\265\266Q\334\021h6\023\210\314;s\263\277O!\206\026|Y2Y\316\372\313\365@t!6\346\222\270\200\214\033\326\315\261\215\334\261\062=@"..., buflen=<optimized out>)
|
|
at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5ebd69fe00, smsg=0x0, det_ctx=0x7f5eaf922000, de_ctx=0x7f5fa2dc7000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9600,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5eaf922000, p=p@entry=0x7f5ebd69fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa10f9600, p=0x7f5ebd69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9600,
|
|
p=p@entry=0x7f5ebd69fe00, slot=slot@entry=0x7f5fa17c0b00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5ebd69fe00,
|
|
s=0x7f5fa17c0b00, tv=0x7f5fa10f9600) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5ebe3e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9600,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
data=0x7f5ebe3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9600)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ebefff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 31 (Thread 0x7f5eaf7ff700 (LWP 182)):
|
|
#0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5eade9fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9500,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ea0122000, p=p@entry=0x7f5eade9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9500, p=0x7f5eade9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9500,
|
|
p=p@entry=0x7f5eade9fe00, slot=slot@entry=0x7f5fa17da3c0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eade9fe00,
|
|
s=0x7f5fa17da3c0, tv=0x7f5fa10f9500) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5eaebe3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9500,
|
|
data=0x7f5eaebe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9500)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eaf7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 30 (Thread 0x7f5e9ffff700 (LWP 183)):
|
|
#0 0x0000000000496427 in DetectProtoContainsProto (
|
|
dp=dp@entry=0x7f5fc7c74c16, proto=6) at detect-engine-proto.c:170
|
|
#1 0x0000000000461ead in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9400,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e9092c000, p=p@entry=0x7f5e9e69fe00)
|
|
at detect.c:1590
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9400, p=0x7f5e9e69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9400,
|
|
p=p@entry=0x7f5e9e69fe00, slot=slot@entry=0x7f5fa17dab40)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e9e69fe00,
|
|
s=0x7f5fa17dab40, tv=0x7f5fa10f9400) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e9f3e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9400,
|
|
data=0x7f5e9f3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9400)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e9ffff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 29 (Thread 0x7f5e907ff700 (LWP 184)):
|
|
#0 __lll_lock_wait ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:135
|
|
#1 0x00007f5fc9729d02 in _L_lock_791 () from /lib64/libpthread.so.0
|
|
#2 0x00007f5fc9729c08 in __GI___pthread_mutex_lock (
|
|
mutex=mutex@entry=0x7f578725d750) at pthread_mutex_lock.c:64
|
|
#3 0x000000000049b616 in DeStateUpdateInspectTransactionId (
|
|
f=f@entry=0x7f578725d700, flags=flags@entry=4 '\004')
|
|
at detect-engine-state.c:1105
|
|
#4 0x00000000004622f4 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9300,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e81122000, p=p@entry=0x7f5e8ee9fe00)
|
|
at detect.c:1808
|
|
#5 0x0000000000463272 in Detect (tv=0x7f5fa10f9300, p=0x7f5e8ee9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#6 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9300,
|
|
p=p@entry=0x7f5e8ee9fe00, slot=slot@entry=0x7f5fa17db2c0)
|
|
at tm-threads.c:132
|
|
#7 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e8ee9fe00,
|
|
s=0x7f5fa17db2c0, tv=0x7f5fa10f9300) at tm-threads.h:149
|
|
#8 AFPReadFromRing (ptv=ptv@entry=0x7f5e8fbe3140) at source-af-packet.c:874
|
|
#9 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9300,
|
|
data=0x7f5e8fbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#10 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9300)
|
|
at tm-threads.c:336
|
|
#11 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e907ff700)
|
|
at pthread_create.c:308
|
|
#12 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 28 (Thread 0x7f5e80fff700 (LWP 185)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5e71932130,
|
|
buf=0x7f5b11bd9f68 "\006\306 \221\314m\034F\025q\237/z\326\351\207\241\263b3v\262:\246_5\200V31\227\326^\304\347\354Ej\371\\\224\327\277s4\024\061y\311\234\201*\243\316\332J\365\022\357Q\v7\242\350\212s\271u\341\246\316\261\250\267\071\200\307k\306\300\302\267\003\217\304\244\266=\201WT\201\304\\\267B\260R\310\344\251a\337n\343\262VU\372\177\256\231\061\v\f\204\327|\311\177#\357\232\376\067B\377", buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0,
|
|
flags=24 '\030', p=0x7f5e7f69fe00, smsg=0x0, det_ctx=0x7f5e71932000,
|
|
de_ctx=0x7f5fa2dc7000) at detect.c:1095
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c100,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e71932000, p=p@entry=0x7f5e7f69fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100c100, p=0x7f5e7f69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c100,
|
|
p=p@entry=0x7f5e7f69fe00, slot=slot@entry=0x7f5fa17dba40)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e7f69fe00,
|
|
s=0x7f5fa17dba40, tv=0x7f5fa100c100) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5e803e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c100,
|
|
data=0x7f5e803e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c100)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e80fff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 27 (Thread 0x7f5e717ff700 (LWP 186)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5e6fe9fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c400,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e62122000, p=p@entry=0x7f5e6fe9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100c400, p=0x7f5e6fe9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c400,
|
|
p=p@entry=0x7f5e6fe9fe00, slot=slot@entry=0x7f5fa17dc1c0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6fe9fe00,
|
|
s=0x7f5fa17dc1c0, tv=0x7f5fa100c400) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e70be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c400,
|
|
data=0x7f5e70be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c400)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e717ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 26 (Thread 0x7f5e61fff700 (LWP 187)):
|
|
#0 0x000000000048eead in PacketPatternCleanup (t=<optimized out>,
|
|
det_ctx=0x7f5e52922000) at detect-engine-mpm.c:738
|
|
#1 0x0000000000461f61 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c500,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e52922000, p=p@entry=0x7f5e6069fe00)
|
|
at detect.c:1825
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100c500, p=0x7f5e6069fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c500,
|
|
p=p@entry=0x7f5e6069fe00, slot=slot@entry=0x7f5fa17dc940)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6069fe00,
|
|
s=0x7f5fa17dc940, tv=0x7f5fa100c500) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e613e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c500,
|
|
data=0x7f5e613e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c500)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e61fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 25 (Thread 0x7f5e527ff700 (LWP 188)):
|
|
#0 DetectPrefilterBuildNonMpmList (mask=<optimized out>,
|
|
det_ctx=<optimized out>) at detect.c:1221
|
|
#1 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c800,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e43132000, p=p@entry=0x7f5e50e9fe00)
|
|
at detect.c:1456
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100c800, p=0x7f5e50e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c800,
|
|
p=p@entry=0x7f5e50e9fe00, slot=slot@entry=0x7f5fa17dd0c0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e50e9fe00,
|
|
s=0x7f5fa17dd0c0, tv=0x7f5fa100c800) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e51be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c800,
|
|
data=0x7f5e51be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c800)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e527ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 24 (Thread 0x7f5e42fff700 (LWP 189)):
|
|
#0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5e4169fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cb00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e33922000, p=p@entry=0x7f5e4169fe00)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100cb00, p=0x7f5e4169fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cb00,
|
|
p=p@entry=0x7f5e4169fe00, slot=slot@entry=0x7f5fa17dd840)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e4169fe00,
|
|
s=0x7f5fa17dd840, tv=0x7f5fa100cb00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e423e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cb00,
|
|
data=0x7f5e423e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cb00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e42fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 23 (Thread 0x7f5e337ff700 (LWP 190)):
|
|
#0 DetectAddressMatchIPv4 (addrs=<optimized out>, addrs_cnt=<optimized out>,
|
|
a=a@entry=0x7f5e31e9fe14) at detect-engine-address.c:1667
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cc00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e24122000, p=p@entry=0x7f5e31e9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100cc00, p=0x7f5e31e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cc00,
|
|
p=p@entry=0x7f5e31e9fe00, slot=slot@entry=0x7f5fa17ddfc0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e31e9fe00,
|
|
s=0x7f5fa17ddfc0, tv=0x7f5fa100cc00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e32be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cc00,
|
|
data=0x7f5e32be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cc00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e337ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 22 (Thread 0x7f5e23fff700 (LWP 191)):
|
|
#0 FlowGetFlowFromHash (tv=tv@entry=0x7f5fa100cd00,
|
|
dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00) at flow-hash.c:661
|
|
#1 0x00000000004e22ae in FlowHandlePacket (tv=tv@entry=0x7f5fa100cd00,
|
|
dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00) at flow.c:332
|
|
#2 0x000000000044cc13 in DecodeTCP (tv=tv@entry=0x7f5fa100cd00,
|
|
dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
pkt=<optimized out>, len=<optimized out>, pq=pq@entry=0x7f5fa17de780)
|
|
at decode-tcp.c:206
|
|
#3 0x000000000044a3eb in DecodeIPV4 (tv=tv@entry=0x7f5fa100cd00,
|
|
dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00,
|
|
pkt=pkt@entry=0x7f5a61da3800 "E", len=len@entry=52,
|
|
pq=pq@entry=0x7f5fa17de780) at decode-ipv4.c:561
|
|
#4 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa100cd00,
|
|
dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00,
|
|
pkt=0x7f5a61da37f2 "@U9Y\325\243", len=<optimized out>,
|
|
pq=pq@entry=0x7f5fa17de780) at decode-ethernet.c:60
|
|
#5 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa100cd00, p=0x7f5e2269fe00,
|
|
data=0x7f5e233fa080, pq=0x7f5fa17de780, postpq=<optimized out>)
|
|
at source-af-packet.c:1847
|
|
#6 0x0000000000537239 in DecodeAFP (tv=<optimized out>, p=<optimized out>,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at source-af-packet.c:1827
|
|
#7 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cd00,
|
|
p=p@entry=0x7f5e2269fe00, slot=slot@entry=0x7f5fa17de740)
|
|
at tm-threads.c:132
|
|
#8 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e2269fe00,
|
|
s=0x7f5fa17de740, tv=0x7f5fa100cd00) at tm-threads.h:149
|
|
#9 AFPReadFromRing (ptv=ptv@entry=0x7f5e233e3140) at source-af-packet.c:874
|
|
#10 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cd00,
|
|
data=0x7f5e233e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#11 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cd00)
|
|
at tm-threads.c:336
|
|
#12 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e23fff700)
|
|
at pthread_create.c:308
|
|
#13 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 21 (Thread 0x7f5e147ff700 (LWP 192)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5e05122130,
|
|
buf=0x7f5a3611d0f4 "Q\356>}.\204\030\271y`y\224;\325\210EP\b5\031\340\070\347\356\a", buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5e12e9fe00, smsg=0x0, det_ctx=0x7f5e05122000, de_ctx=0x7f5fa2dc7000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100ce00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e05122000, p=p@entry=0x7f5e12e9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100ce00, p=0x7f5e12e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100ce00,
|
|
p=p@entry=0x7f5e12e9fe00, slot=slot@entry=0x7f5fa17deec0)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e12e9fe00,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
s=0x7f5fa17deec0, tv=0x7f5fa100ce00) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5e13be3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100ce00,
|
|
data=0x7f5e13be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100ce00)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e147ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 20 (Thread 0x7f5e04fff700 (LWP 193)):
|
|
#0 0x000000000055d6be in TmqhOutputPacketpool (t=<optimized out>,
|
|
p=0x7f5e0369fe00) at tmqh-packetpool.c:459
|
|
#1 0x0000000000539477 in TmThreadsSlotProcessPkt (p=0x7f5e0369fe00,
|
|
s=0x7f5fa2cbd780, tv=0x7f5fa100d100) at tm-threads.h:163
|
|
#2 AFPReadFromRing (ptv=ptv@entry=0x7f5e043e3140) at source-af-packet.c:874
|
|
#3 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d100,
|
|
data=0x7f5e043e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#4 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d100)
|
|
at tm-threads.c:336
|
|
#5 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e04fff700)
|
|
at pthread_create.c:308
|
|
#6 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 19 (Thread 0x7f5df57ff700 (LWP 194)):
|
|
#0 FlowGetAppState (f=f@entry=0x7f578f950740) at flow.c:870
|
|
#1 0x00000000004618d9 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d200,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5de6122000, p=p@entry=0x7f5df3e9fe00)
|
|
at detect.c:1354
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100d200, p=0x7f5df3e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d200,
|
|
p=p@entry=0x7f5df3e9fe00, slot=slot@entry=0x7f5fa2cbdf00)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5df3e9fe00,
|
|
s=0x7f5fa2cbdf00, tv=0x7f5fa100d200) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5df4be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d200,
|
|
data=0x7f5df4be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d200)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5df57ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 18 (Thread 0x7f5de5fff700 (LWP 195)):
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5de5ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100d400, data=0x7f5de53e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d400)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5de5fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 17 (Thread 0x7f5dd67ff700 (LWP 196)):
|
|
#0 0x0000000000461d1e in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d500,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5dc7122000, p=p@entry=0x7f5dd4e9fe00)
|
|
at detect.c:1508
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100d500, p=0x7f5dd4e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d500,
|
|
p=p@entry=0x7f5dd4e9fe00, slot=slot@entry=0x7f5fa2cbee00)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dd4e9fe00,
|
|
s=0x7f5fa2cbee00, tv=0x7f5fa100d500) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5dd5be3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d500,
|
|
data=0x7f5dd5be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d500)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dd67ff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 16 (Thread 0x7f5dc6fff700 (LWP 197)):
|
|
#0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5dc569fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d600,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5db7922000, p=p@entry=0x7f5dc569fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100d600, p=0x7f5dc569fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d600,
|
|
p=p@entry=0x7f5dc569fe00, slot=slot@entry=0x7f5fa2cbf580)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dc569fe00,
|
|
s=0x7f5fa2cbf580, tv=0x7f5fa100d600) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5dc63e3140) at source-af-packet.c:874
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d600,
|
|
data=0x7f5dc63e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d600)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dc6fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 15 (Thread 0x7f5db77ff700 (LWP 198)):
|
|
#0 0x0000000000461ea4 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d900,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5da8122000, p=p@entry=0x7f5db5e9fe00)
|
|
at detect.c:1590
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100d900, p=0x7f5db5e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d900,
|
|
p=p@entry=0x7f5db5e9fe00, slot=slot@entry=0x7f5fa2cbfd00)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5db5e9fe00,
|
|
s=0x7f5fa2cbfd00, tv=0x7f5fa100d900) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5db6be3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d900,
|
|
data=0x7f5db6be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d900)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5db77ff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 14 (Thread 0x7f5da7fff700 (LWP 199)):
|
|
#0 0x0000000000599460 in SCACSearch (mpm_ctx=<optimized out>,
|
|
mpm_thread_ctx=<optimized out>, pmq=0x7f5d98933130,
|
|
buf=0x7f5961be4494 "\037\215F,..bb\305`\340\223\210\026\351\353\342,\230,\304aQR`\254O\252\372\204\246\302\031_\222\024\207\276pY\005!J\246\070\351]\264\331\260F\226\216\260\271\245\036\302\301%\307\342\214\240\273\003\241\204P\a\364\206\006\223y\312\061\211\204\324`U\216\023\222$\351\261\243\065\265ZD\034XZJ\022;GC\301\326n\302\371a\207,\214@\206\324\353!\363-IP\v\330\354\234\344\340b\216\311%\273#\215\224\n'\005:\310\be\212\315\375\320\261F\b\r\255\211tJ`\025\322$h\022\326.o\260\262\274\300\334B\223\267\336\377\203H!y\344\261\207\350m]%\322\202a\346\027\070?\321\335\020F\001\201\034\361\352\371+"...,
|
|
buflen=<optimized out>) at util-mpm-ac.c:1310
|
|
#1 0x0000000000463139 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0,
|
|
flags=24 '\030', p=0x7f5da669fe00, smsg=0x0, det_ctx=0x7f5d98933000,
|
|
de_ctx=0x7f5fa2dc7000) at detect.c:1086
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100da00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d98933000, p=p@entry=0x7f5da669fe00)
|
|
at detect.c:1462
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100da00, p=0x7f5da669fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100da00,
|
|
p=p@entry=0x7f5da669fe00, slot=slot@entry=0x7f5fa2cc0480)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5da669fe00,
|
|
s=0x7f5fa2cc0480, tv=0x7f5fa100da00) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5da73e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100da00,
|
|
data=0x7f5da73e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100da00)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5da7fff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 13 (Thread 0x7f5d987ff700 (LWP 200)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5d97bfc0c0, buf=0x7f5955276fcc "\361g", buflen=<optimized out>)
|
|
at util-mpm-ac.c:1325
|
|
#1 0x0000000000420829 in AppLayerProtoDetectPMGetProto (f=0x7f57719c1e80,
|
|
f=0x7f57719c1e80, ipproto=17 '\021', pm_results=0x7f5d987fd0e0,
|
|
direction=192 '\300', buflen=46, buf=0x7f5955276fcc "\361g",
|
|
tctx=0x7f5d97bfc0c0) at app-layer-detect-proto.c:243
|
|
#2 AppLayerProtoDetectGetProto (tctx=0x7f5d97bfc0c0,
|
|
f=f@entry=0x7f57719c1e80, buf=0x7f5955276fcc "\361g", buflen=46,
|
|
ipproto=ipproto@entry=17 '\021', direction=direction@entry=4 '\004')
|
|
at app-layer-detect-proto.c:1305
|
|
#3 0x0000000000419270 in AppLayerHandleUdp (tv=tv@entry=0x7f5fa100dd00,
|
|
tctx=0x7f5d9780e040, p=p@entry=0x7f5d96e9fe00, f=0x7f57719c1e80)
|
|
at app-layer.c:494
|
|
#4 0x000000000044d0a2 in DecodeUDP (tv=tv@entry=0x7f5fa100dd00,
|
|
dtv=dtv@entry=0x7f5d97bfa080, p=p@entry=0x7f5d96e9fe00,
|
|
pkt=0x7f5955276fc4 "$\211", len=<optimized out>,
|
|
pq=pq@entry=0x7f5fa2cc0c40) at decode-udp.c:97
|
|
#5 0x000000000044ab5d in DecodeIPV4 (tv=tv@entry=0x7f5fa100dd00,
|
|
dtv=dtv@entry=0x7f5d97bfa080, p=p@entry=0x7f5d96e9fe00,
|
|
pkt=pkt@entry=0x7f5955276fb0 "E", len=len@entry=74,
|
|
pq=pq@entry=0x7f5fa2cc0c40) at decode-ipv4.c:565
|
|
#6 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa100dd00,
|
|
dtv=dtv@entry=0x7f5d97bfa080, p=p@entry=0x7f5d96e9fe00,
|
|
pkt=0x7f5955276fa2 "@U9Y\325\243", len=<optimized out>,
|
|
pq=pq@entry=0x7f5fa2cc0c40) at decode-ethernet.c:60
|
|
#7 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa100dd00, p=0x7f5d96e9fe00,
|
|
data=0x7f5d97bfa080, pq=0x7f5fa2cc0c40, postpq=<optimized out>)
|
|
at source-af-packet.c:1847
|
|
#8 0x0000000000537239 in DecodeAFP (tv=<optimized out>, p=<optimized out>,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at source-af-packet.c:1827
|
|
#9 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100dd00,
|
|
p=p@entry=0x7f5d96e9fe00, slot=slot@entry=0x7f5fa2cc0c00)
|
|
at tm-threads.c:132
|
|
#10 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d96e9fe00,
|
|
s=0x7f5fa2cc0c00, tv=0x7f5fa100dd00) at tm-threads.h:149
|
|
#11 AFPReadFromRing (ptv=ptv@entry=0x7f5d97be3140) at source-af-packet.c:874
|
|
#12 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100dd00,
|
|
data=0x7f5d97be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#13 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100dd00)
|
|
at tm-threads.c:336
|
|
#14 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d987ff700)
|
|
at pthread_create.c:308
|
|
#15 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 12 (Thread 0x7f5d88fff700 (LWP 201)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d88ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100de00, data=0x7f5d883e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100de00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d88fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 11 (Thread 0x7f5d797ff700 (LWP 202)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5d77e9fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100df00,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d6a122000, p=p@entry=0x7f5d77e9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100df00, p=0x7f5d77e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100df00,
|
|
p=p@entry=0x7f5d77e9fe00, slot=slot@entry=0x7f5fa2cc1b00)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d77e9fe00,
|
|
s=0x7f5fa2cc1b00, tv=0x7f5fa100df00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5d78be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100df00,
|
|
data=0x7f5d78be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100df00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d797ff700)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 10 (Thread 0x7f5d69fff700 (LWP 203)):
|
|
#0 0x0000000000599480 in SCACSearch (mpm_ctx=<optimized out>,
|
|
mpm_thread_ctx=<optimized out>, pmq=0x7f5d5a922130,
|
|
buf=0x7f58fdeeb828 "\200\233\372\312+\354\003\250C:\222\\\266\375d$\230\361\340\360\375\316\236\233\332(\212\\\336t\320\312\244\254\342\245\017.\"\313b\001l\204\026\237\067G\321\335\311\v\355DP\273s,\177/\326\344wk\330\305\315\223)\246\322\275\202\vE\323\377{^\274\207\352\245\273\003\237\217.\360\261\355\237\334|\343\t\223\026", buflen=<optimized out>) at util-mpm-ac.c:1324
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0,
|
|
flags=24 '\030', p=0x7f5d6869fe00, smsg=0x0, det_ctx=0x7f5d5a922000,
|
|
de_ctx=0x7f5fa2dc7000) at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e000,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d5a922000, p=p@entry=0x7f5d6869fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100e000, p=0x7f5d6869fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e000,
|
|
p=p@entry=0x7f5d6869fe00, slot=slot@entry=0x7f5fa2e343c0)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d6869fe00,
|
|
s=0x7f5fa2e343c0, tv=0x7f5fa100e000) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5d693e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e000,
|
|
data=0x7f5d693e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e000)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d69fff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 9 (Thread 0x7f5d5a7ff700 (LWP 204)):
|
|
#0 0x0000000000461d11 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e100,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d4b143000, p=p@entry=0x7f5d58e9fe00)
|
|
at detect.c:1508
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100e100, p=0x7f5d58e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e100,
|
|
p=p@entry=0x7f5d58e9fe00, slot=slot@entry=0x7f5fa2e34b40)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d58e9fe00,
|
|
s=0x7f5fa2e34b40, tv=0x7f5fa100e100) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5d59be3140) at source-af-packet.c:874
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e100,
|
|
data=0x7f5d59be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e100)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d5a7ff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 8 (Thread 0x7f5d4afff700 (LWP 205)):
|
|
#0 DetectAddressMatchIPv4 (addrs=<optimized out>, addrs_cnt=<optimized out>,
|
|
a=a@entry=0x7f5d4969fe14) at detect-engine-address.c:1659
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e200,
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d3b922000, p=p@entry=0x7f5d4969fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100e200, p=0x7f5d4969fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e200,
|
|
p=p@entry=0x7f5d4969fe00, slot=slot@entry=0x7f5fa2e352c0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d4969fe00,
|
|
s=0x7f5fa2e352c0, tv=0x7f5fa100e200) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5d4a3e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e200,
|
|
data=0x7f5d4a3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e200)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d4afff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 7 (Thread 0x7f5d3b7ff700 (LWP 206)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5d2c122130,
|
|
buf=0x7f58a7ce9f74 "\357\301\322o\307\220\032\302\067/nx\336\070\006\262\301#>\023\035\311<\031Y\021\016M\376\v\267\200\211\220R\366d\234m\202\257\023y\260\360[\266y\334\347\337\n|4 \240\300\177\066h\314\324\347\231\243\223\366\264~s\032p\nwH6Y\244f@\326\363@\240bCZ\373r@\205\344i{\206\006\006\327\274l\207\223\210\250\253\205!\262APE\245D;\035G\240\315W\247\353S\037\313\345 \361\242p\231\070\006\324\065mk\261}\224\267\272\322Y\241\334L{W\b\255\313\266\367\300\372\220O\307\326P\263\364\357\330\221\316\n0RD<\216T\370J+[w#\263\365\317L\323\221\355\372\350\350\361\250\256'\036\211\332\017\022\274L"...,
|
|
buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000463139 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=4 '\004',
|
|
p=0x7f5d39e9fe00, smsg=0x0, det_ctx=0x7f5d2c122000, de_ctx=0x7f5fa2dc7000)
|
|
at detect.c:1086
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e300,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d2c122000, p=p@entry=0x7f5d39e9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100e300, p=0x7f5d39e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e300,
|
|
p=p@entry=0x7f5d39e9fe00, slot=slot@entry=0x7f5fa2e35a40)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d39e9fe00,
|
|
s=0x7f5fa2e35a40, tv=0x7f5fa100e300) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5d3abe3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e300,
|
|
data=0x7f5d3abe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e300)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d3b7ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 6 (Thread 0x7f5d2bfff700 (LWP 207)):
|
|
#0 0x00007f5fc92489b3 in select () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000056728a in UnixMain (this=this@entry=0x85b9a0 <command>)
|
|
at unix-manager.c:520
|
|
#2 0x00000000005674e2 in UnixManager (th_v=0x7f5fa100e400,
|
|
thread_data=<optimized out>) at unix-manager.c:910
|
|
#3 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e400)
|
|
at tm-threads.c:600
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2bfff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 5 (Thread 0x7f5d2afff700 (LWP 208)):
|
|
#0 FlowManagerHashRowTimeout (counters=<optimized out>,
|
|
emergency=<optimized out>, ts=<optimized out>, f=0x7f5773a83e40)
|
|
at flow-manager.c:280
|
|
#1 FlowTimeoutHash (try_cnt=0, counters=<synthetic pointer>, hash_max=65536,
|
|
hash_min=<optimized out>, ts=0x7f5d2affdc70) at flow-manager.c:397
|
|
#2 FlowManager (th_v=0x7f5fa100e500, thread_data=0x7f5d2a00e040)
|
|
at flow-manager.c:620
|
|
#3 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e500)
|
|
at tm-threads.c:600
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2afff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 4 (Thread 0x7f5d293ff700 (LWP 209)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x00000000004e5c3f in FlowRecycler (th_v=0x7f5fa100e600,
|
|
thread_data=0x7f5d2840e058) at flow-manager.c:844
|
|
#2 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e600)
|
|
at tm-threads.c:600
|
|
#3 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d293ff700)
|
|
at pthread_create.c:308
|
|
#4 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 3 (Thread 0x7f5d283ff700 (LWP 210)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x0000000000444e1f in StatsWakeupThread (arg=0x7f5fa100e700)
|
|
at counters.c:435
|
|
#2 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d283ff700)
|
|
at pthread_create.c:308
|
|
#3 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 2 (Thread 0x7f5d27bfe700 (LWP 211)):
|
|
#0 0x00007f5fc9242abd in write () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x00007f5fc91d1383 in _IO_new_file_write (f=0x7f5f9a2f8800,
|
|
data=0x7f5fcc973000, n=2967) at fileops.c:1301
|
|
#2 0x00007f5fc91d27ec in new_do_write (to_do=2967,
|
|
data=0x7f5fcc973000 '-' <repeats 67 times>, "\nDate: 2/19/2016 -- 23:49:55 (uptime: 0d, 00h 07m 20s)\n", '-' <repeats 67 times>, "\nCounter "...,
|
|
fp=0x7f5f9a2f8800) at fileops.c:537
|
|
#3 _IO_new_do_write (fp=0x7f5f9a2f8800,
|
|
data=0x7f5fcc973000 '-' <repeats 67 times>, "\nDate: 2/19/2016 -- 23:49:55 (uptime: 0d, 00h 07m 20s)\n", '-' <repeats 67 times>, "\nCounter "...,
|
|
to_do=2967) at fileops.c:510
|
|
#4 0x00007f5fc91d0be0 in _IO_new_file_sync (fp=0x7f5f9a2f8800)
|
|
at fileops.c:891
|
|
#5 0x00007f5fc91c6482 in __GI__IO_fflush (fp=0x7f5f9a2f8800) at iofflush.c:41
|
|
#6 0x0000000000587667 in SCLogFileWrite (
|
|
buffer=0x7f5d26c10010 '-' <repeats 67 times>, "\nDate: 2/19/2016 -- 23:49:55 (uptime: 0d, 00h 07m 20s)\n", '-' <repeats 67 times>, "\nCounter "...,
|
|
buffer_len=2967, log_ctx=0x7f5f9b3ed3c0) at util-logopenfile.c:144
|
|
#7 0x00000000004fb7bb in LogStatsLogger (tv=<optimized out>,
|
|
thread_data=0x7f5d26c0f040, st=0x835d40 <stats_table>) at log-stats.c:157
|
|
#8 0x000000000051a209 in OutputStatsLog (tv=tv@entry=0x7f5fa100e800,
|
|
thread_data=thread_data@entry=0x7f5d26c0e058,
|
|
st=st@entry=0x835d40 <stats_table>) at output-stats.c:101
|
|
#9 0x0000000000446204 in StatsOutput (tv=0x7f5fa100e800) at counters.c:752
|
|
#10 StatsMgmtThread (arg=0x7f5fa100e800) at counters.c:362
|
|
#11 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d27bfe700)
|
|
at pthread_create.c:308
|
|
#12 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
---Type <return> to continue, or q <return> to quit---
|
|
|
|
Thread 1 (Thread 0x7f5fcc962940 (LWP 1)):
|
|
#0 usleep (useconds=useconds@entry=10000)
|
|
at ../sysdeps/unix/sysv/linux/usleep.c:33
|
|
#1 0x0000000000410ddd in main (argc=<optimized out>, argv=<optimized out>)
|
|
at suricata.c:2446
|
|
(gdb)
|
|
(gdb) cont
|
|
Continuing.
|
|
|
|
^C
|
|
Program received signal SIGINT, Interrupt.
|
|
0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81
|
|
81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
|
|
(gdb)
|
|
Continuing.
|
|
^C
|
|
Program received signal SIGINT, Interrupt.
|
|
0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81
|
|
81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS)
|
|
(gdb) thread apply all bt
|
|
|
|
Thread 46 (Thread 0x7f5f97fff700 (LWP 167)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f97ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100c900, data=0x7f5f973e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c900)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f97fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 45 (Thread 0x7f5f887ff700 (LWP 168)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f887fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa108eb00, data=0x7f5f87be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa108eb00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f887ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 44 (Thread 0x7f5f78fff700 (LWP 169)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f78ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa2714100, data=0x7f5f783e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa2714100)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f78fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 43 (Thread 0x7f5f697ff700 (LWP 170)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f697fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa26f6f00, data=0x7f5f68be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa26f6f00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f697ff700)
|
|
at pthread_create.c:308
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 42 (Thread 0x7f5f59fff700 (LWP 171)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f59ffdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa10fa000, data=0x7f5f593e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10fa000)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f59fff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 41 (Thread 0x7f5f4a7ff700 (LWP 172)):
|
|
#0 0x00007f5fc9729c02 in __GI___pthread_mutex_lock (
|
|
mutex=mutex@entry=0x7f5780b5bb90) at pthread_mutex_lock.c:64
|
|
#1 0x0000000000461815 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9f00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbe5b6000, p=p@entry=0x7f5f48e9fe00)
|
|
at detect.c:1287
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9f00, p=0x7f5f48e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9f00,
|
|
p=p@entry=0x7f5f48e9fe00, slot=slot@entry=0x7f5fa17bc780)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f48e9fe00,
|
|
s=0x7f5fa17bc780, tv=0x7f5fa10f9f00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5f49be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9f00,
|
|
data=0x7f5f49be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9f00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f4a7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 40 (Thread 0x7f5f3afff700 (LWP 173)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f3affdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa10f9e00, data=0x7f5f3a3e3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9e00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f3afff700)
|
|
at pthread_create.c:308
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 39 (Thread 0x7f5f2b7ff700 (LWP 174)):
|
|
#0 DetectPrefilterBuildNonMpmList (mask=<optimized out>,
|
|
det_ctx=<optimized out>) at detect.c:1222
|
|
#1 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9d00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbc53e000, p=p@entry=0x7f5f29e9fe00)
|
|
at detect.c:1456
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9d00, p=0x7f5f29e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9d00,
|
|
p=p@entry=0x7f5f29e9fe00, slot=slot@entry=0x7f5fa17bd680)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f29e9fe00,
|
|
s=0x7f5fa17bd680, tv=0x7f5fa10f9d00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5f2abe3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9d00,
|
|
data=0x7f5f2abe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9d00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f2b7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 38 (Thread 0x7f5f1bfff700 (LWP 175)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5f1a69fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9c00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c11e000, p=p@entry=0x7f5f1a69fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9c00, p=0x7f5f1a69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9c00,
|
|
p=p@entry=0x7f5f1a69fe00, slot=slot@entry=0x7f5fa17bde00)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f1a69fe00,
|
|
s=0x7f5fa17bde00, tv=0x7f5fa10f9c00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5f1b3e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9c00,
|
|
data=0x7f5f1b3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9c00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f1bfff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 37 (Thread 0x7f5f0c7ff700 (LWP 176)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5f0ae9fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9b00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c14a000, p=p@entry=0x7f5f0ae9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9b00, p=0x7f5f0ae9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9b00,
|
|
p=p@entry=0x7f5f0ae9fe00, slot=slot@entry=0x7f5fa17be580)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f0ae9fe00,
|
|
s=0x7f5fa17be580, tv=0x7f5fa10f9b00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5f0bbe3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9b00,
|
|
data=0x7f5f0bbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9b00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f0c7ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 36 (Thread 0x7f5efcfff700 (LWP 177)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f573c176130,
|
|
buf=0x7f5bf8c38078 "\325#\362\347S\327\215\244\373\212\243[\232\344<3\216\243\f1\337\261\254\062s\311\346\255\022\a\216\364\322s\370S\217Bi\274\344qV!\274\001\307J8\367\307j^\334Q\327\361\240A\212=)\006;R\377",
|
|
buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5efb69fe00, smsg=0x0, det_ctx=0x7f573c176000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9a00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c176000, p=p@entry=0x7f5efb69fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa10f9a00, p=0x7f5efb69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9a00,
|
|
p=p@entry=0x7f5efb69fe00, slot=slot@entry=0x7f5fa17bed00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5efb69fe00,
|
|
s=0x7f5fa17bed00, tv=0x7f5fa10f9a00) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5efc3e3140) at source-af-packet.c:874
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9a00,
|
|
data=0x7f5efc3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9a00)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5efcfff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 35 (Thread 0x7f5eed7ff700 (LWP 178)):
|
|
#0 0x000000000047488b in DetectAddressMatch (dd=dd@entry=0x7f5fbca76f80,
|
|
a=a@entry=0x7f5eebe9fe14) at detect-engine-address.c:1814
|
|
#1 0x000000000047697b in DetectAddressLookupInHead (gh=<optimized out>,
|
|
a=a@entry=0x7f5eebe9fe14) at detect-engine-address.c:1890
|
|
#2 0x000000000046169b in SigMatchSignaturesGetSgh (
|
|
de_ctx=de_ctx@entry=0x7f5fa10ae000, det_ctx=det_ctx@entry=0x7f573c1a2000,
|
|
p=p@entry=0x7f5eebe9fe00) at detect.c:623
|
|
#3 0x0000000000462184 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9900,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c1a2000, p=p@entry=0x7f5eebe9fe00)
|
|
at detect.c:1400
|
|
#4 0x0000000000463272 in Detect (tv=0x7f5fa10f9900, p=0x7f5eebe9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#5 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9900,
|
|
p=p@entry=0x7f5eebe9fe00, slot=slot@entry=0x7f5fa17bf480)
|
|
at tm-threads.c:132
|
|
#6 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eebe9fe00,
|
|
s=0x7f5fa17bf480, tv=0x7f5fa10f9900) at tm-threads.h:149
|
|
#7 AFPReadFromRing (ptv=ptv@entry=0x7f5eecbe3140) at source-af-packet.c:874
|
|
#8 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9900,
|
|
data=0x7f5eecbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#9 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9900)
|
|
at tm-threads.c:336
|
|
#10 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eed7ff700)
|
|
at pthread_create.c:308
|
|
#11 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 34 (Thread 0x7f5eddfff700 (LWP 179)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5edc69fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9800,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c1ce000, p=p@entry=0x7f5edc69fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa10f9800, p=0x7f5edc69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9800,
|
|
p=p@entry=0x7f5edc69fe00, slot=slot@entry=0x7f5fa17bfc00)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5edc69fe00,
|
|
s=0x7f5fa17bfc00, tv=0x7f5fa10f9800) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5edd3e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9800,
|
|
data=0x7f5edd3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9800)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eddfff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 33 (Thread 0x7f5ece7ff700 (LWP 180)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5ece7fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa10f9700, data=0x7f5ecdbe3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9700)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ece7ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 32 (Thread 0x7f5ebefff700 (LWP 181)):
|
|
#0 0x0000000000599480 in SCACSearch (mpm_ctx=<optimized out>,
|
|
mpm_thread_ctx=<optimized out>, pmq=0x7f573c22b130,
|
|
buf=0x7f5b7a08be64 "\377\"\005\223\031\001", buflen=<optimized out>)
|
|
at util-mpm-ac.c:1324
|
|
#1 0x0000000000463139 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=4 '\004',
|
|
p=0x7f5ebd69fe00, smsg=0x0, det_ctx=0x7f573c22b000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1086
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9600,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c22b000, p=p@entry=0x7f5ebd69fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa10f9600, p=0x7f5ebd69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9600,
|
|
p=p@entry=0x7f5ebd69fe00, slot=slot@entry=0x7f5fa17c0b00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5ebd69fe00,
|
|
s=0x7f5fa17c0b00, tv=0x7f5fa10f9600) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5ebe3e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9600,
|
|
data=0x7f5ebe3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9600)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ebefff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 31 (Thread 0x7f5eaf7ff700 (LWP 182)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f573c255130,
|
|
buf=0x7f5b54a9f614 ' ' <repeats 66 times>, "\n", ' ' <repeats 100 times>, "\n", ' ' <repeats 32 times>..., buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5eade9fe00, smsg=0x0, det_ctx=0x7f573c255000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9500,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c255000, p=p@entry=0x7f5eade9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa10f9500, p=0x7f5eade9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9500,
|
|
p=p@entry=0x7f5eade9fe00, slot=slot@entry=0x7f5fa17da3c0)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eade9fe00,
|
|
s=0x7f5fa17da3c0, tv=0x7f5fa10f9500) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5eaebe3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9500,
|
|
data=0x7f5eaebe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9500)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eaf7ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 30 (Thread 0x7f5e9ffff700 (LWP 183)):
|
|
#0 0x00000000004625b2 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9400,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c289000, p=p@entry=0x7f5e9e69fe00)
|
|
at detect.c:1623
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa10f9400, p=0x7f5e9e69fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9400,
|
|
p=p@entry=0x7f5e9e69fe00, slot=slot@entry=0x7f5fa17dab40)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e9e69fe00,
|
|
s=0x7f5fa17dab40, tv=0x7f5fa10f9400) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5e9f3e3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9400,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
data=0x7f5e9f3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9400)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e9ffff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 29 (Thread 0x7f5e907ff700 (LWP 184)):
|
|
#0 0x0000000000599480 in SCACSearch (mpm_ctx=<optimized out>,
|
|
mpm_thread_ctx=<optimized out>, pmq=0x7f573c2b5130,
|
|
buf=0x7f5b2da106a8 "\300\342~!Y\207\266\263\276Q\367I\215\217\261\344\177#\371\327\021l\273\314\221\367e8\372\216k\326\065+\017\355O\016\315g\326P\245T\237\357\257O\345\372\327\222\304\306\336\345Y\206\n7#\371\327\006\"6\225\373\232A\236\227\360\246U\232\303T\260\220e\v+\021\236\314\b?\312\272\257\ri\021\351\276'\327!\222\060D\262-\334$\216\060\371\316>\204b\271\017\206\251\366}wRA\367\036%a\371\377", buflen=<optimized out>) at util-mpm-ac.c:1324
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5e8ee9fe00, smsg=0x0, det_ctx=0x7f573c2b5000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9300,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c2b5000, p=p@entry=0x7f5e8ee9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa10f9300, p=0x7f5e8ee9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9300,
|
|
p=p@entry=0x7f5e8ee9fe00, slot=slot@entry=0x7f5fa17db2c0)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e8ee9fe00,
|
|
s=0x7f5fa17db2c0, tv=0x7f5fa10f9300) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5e8fbe3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9300,
|
|
data=0x7f5e8fbe3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9300)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e907ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 28 (Thread 0x7f5e80fff700 (LWP 185)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5e7f69fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c100,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c2e1000, p=p@entry=0x7f5e7f69fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100c100, p=0x7f5e7f69fe00,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c100,
|
|
p=p@entry=0x7f5e7f69fe00, slot=slot@entry=0x7f5fa17dba40)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e7f69fe00,
|
|
s=0x7f5fa17dba40, tv=0x7f5fa100c100) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e803e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c100,
|
|
data=0x7f5e803e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c100)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e80fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 27 (Thread 0x7f5e717ff700 (LWP 186)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5e6fe9fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c400,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbdcea000, p=p@entry=0x7f5e6fe9fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100c400, p=0x7f5e6fe9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c400,
|
|
p=p@entry=0x7f5e6fe9fe00, slot=slot@entry=0x7f5fa17dc1c0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6fe9fe00,
|
|
s=0x7f5fa17dc1c0, tv=0x7f5fa100c400) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e70be3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c400,
|
|
data=0x7f5e70be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c400)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e717ff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 26 (Thread 0x7f5e61fff700 (LWP 187)):
|
|
#0 0x0000000000461ead in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c500,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbde7c000, p=p@entry=0x7f5e6069fe00)
|
|
at detect.c:1590
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100c500, p=0x7f5e6069fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c500,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
p=p@entry=0x7f5e6069fe00, slot=slot@entry=0x7f5fa17dc940)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6069fe00,
|
|
s=0x7f5fa17dc940, tv=0x7f5fa100c500) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5e613e3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c500,
|
|
data=0x7f5e613e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c500)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e61fff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 25 (Thread 0x7f5e527ff700 (LWP 188)):
|
|
#0 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c800,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c349000, p=p@entry=0x7f5e50e9fe00)
|
|
at detect.c:1590
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100c800, p=0x7f5e50e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c800,
|
|
p=p@entry=0x7f5e50e9fe00, slot=slot@entry=0x7f5fa17dd0c0)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e50e9fe00,
|
|
s=0x7f5fa17dd0c0, tv=0x7f5fa100c800) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5e51be3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c800,
|
|
data=0x7f5e51be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c800)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e527ff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 24 (Thread 0x7f5e42fff700 (LWP 189)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5e4169fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cb00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c375000, p=p@entry=0x7f5e4169fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100cb00, p=0x7f5e4169fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cb00,
|
|
p=p@entry=0x7f5e4169fe00, slot=slot@entry=0x7f5fa17dd840)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e4169fe00,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
s=0x7f5fa17dd840, tv=0x7f5fa100cb00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5e423e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cb00,
|
|
data=0x7f5e423e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cb00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e42fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 23 (Thread 0x7f5e337ff700 (LWP 190)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5e337fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100cc00, data=0x7f5e32be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cc00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e337ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 22 (Thread 0x7f5e23fff700 (LWP 191)):
|
|
#0 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cd00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c3cd000, p=p@entry=0x7f5e2269fe00)
|
|
at detect.c:1498
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100cd00, p=0x7f5e2269fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cd00,
|
|
p=p@entry=0x7f5e2269fe00, slot=slot@entry=0x7f5fa17de740)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e2269fe00,
|
|
s=0x7f5fa17de740, tv=0x7f5fa100cd00) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5e233e3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cd00,
|
|
data=0x7f5e233e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cd00)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e23fff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 21 (Thread 0x7f5e147ff700 (LWP 192)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f573c3f7130,
|
|
buf=0x7f5a46bddd54 ">!\350\027\036\024\361f\224\267\rm\375\253\247]",
|
|
---Type <return> to continue, or q <return> to quit---
|
|
buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000463139 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5e12e9fe00, smsg=0x0, det_ctx=0x7f573c3f7000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1086
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100ce00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c3f7000, p=p@entry=0x7f5e12e9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100ce00, p=0x7f5e12e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100ce00,
|
|
p=p@entry=0x7f5e12e9fe00, slot=slot@entry=0x7f5fa17deec0)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e12e9fe00,
|
|
s=0x7f5fa17deec0, tv=0x7f5fa100ce00) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5e13be3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100ce00,
|
|
data=0x7f5e13be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100ce00)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e147ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 20 (Thread 0x7f5e04fff700 (LWP 193)):
|
|
#0 0x00007f5fcc52be51 in arena_chunk_dirty_insert (
|
|
rbtree=rbtree@entry=0x7f5fc80f5190, node=node@entry=0x7f5732400000)
|
|
at src/arena.c:171
|
|
#1 0x00007f5fcc52ca98 in arena_avail_insert (
|
|
arena=arena@entry=0x7f5fc80f5100, chunk=chunk@entry=0x7f5732400000,
|
|
pageind=pageind@entry=923, npages=npages@entry=17,
|
|
maybe_adjac_pred=maybe_adjac_pred@entry=true,
|
|
maybe_adjac_succ=maybe_adjac_succ@entry=true) at src/arena.c:240
|
|
#2 0x00007f5fcc52d596 in arena_run_dalloc (arena=arena@entry=0x7f5fc80f5100,
|
|
run=<optimized out>, dirty=<optimized out>, dirty@entry=true,
|
|
cleaned=cleaned@entry=false) at src/arena.c:1215
|
|
#3 0x00007f5fcc52f157 in je_arena_dalloc_large_locked (
|
|
arena=arena@entry=0x7f5fc80f5100, chunk=chunk@entry=0x7f5732400000,
|
|
ptr=ptr@entry=0x7f573279b000) at src/arena.c:1971
|
|
#4 0x00007f5fcc52f18d in je_arena_dalloc_large (arena=0x7f5fc80f5100,
|
|
chunk=0x7f5732400000, ptr=0x7f573279b000) at src/arena.c:1979
|
|
#5 0x000000000055df15 in PacketPoolGetPacket () at tmqh-packetpool.c:272
|
|
#6 0x0000000000447fc9 in PacketGetFromQueueOrAlloc () at decode.c:166
|
|
#7 0x00000000004486c8 in PacketDefragPktSetup (
|
|
parent=parent@entry=0x7f5e0369fe00, pkt=pkt@entry=0x0, len=len@entry=0,
|
|
proto=<optimized out>) at decode.c:332
|
|
#8 0x000000000044eb35 in Defrag4Reassemble (tv=0xb90, p=0x7f5e0369fe00,
|
|
tracker=0x7f5fc6d98180) at defrag.c:290
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#9 DefragInsertFrag (tv=tv@entry=0x7f5fa100d100,
|
|
dtv=dtv@entry=0x7f5e043fa080, tracker=tracker@entry=0x7f5fc6d98180,
|
|
p=p@entry=0x7f5e0369fe00, pq=pq@entry=0x7f5fa2cbd7c0) at defrag.c:781
|
|
#10 0x000000000044f4d2 in Defrag (tv=tv@entry=0x7f5fa100d100,
|
|
dtv=dtv@entry=0x7f5e043fa080, p=p@entry=0x7f5e0369fe00,
|
|
pq=pq@entry=0x7f5fa2cbd7c0) at defrag.c:947
|
|
#11 0x000000000044acbe in DecodeIPV4 (tv=tv@entry=0x7f5fa100d100,
|
|
dtv=dtv@entry=0x7f5e043fa080, p=p@entry=0x7f5e0369fe00,
|
|
pkt=pkt@entry=0x7f5a271fb800 "E", len=len@entry=1139,
|
|
pq=pq@entry=0x7f5fa2cbd7c0) at decode-ipv4.c:536
|
|
#12 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa100d100,
|
|
dtv=dtv@entry=0x7f5e043fa080, p=p@entry=0x7f5e0369fe00,
|
|
pkt=0x7f5a271fb7f2 "@U9Y\250Z", len=<optimized out>,
|
|
pq=pq@entry=0x7f5fa2cbd7c0) at decode-ethernet.c:60
|
|
#13 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa100d100, p=0x7f5e0369fe00,
|
|
data=0x7f5e043fa080, pq=0x7f5fa2cbd7c0, postpq=<optimized out>)
|
|
at source-af-packet.c:1847
|
|
#14 0x0000000000537239 in DecodeAFP (tv=<optimized out>, p=<optimized out>,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at source-af-packet.c:1827
|
|
#15 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d100,
|
|
p=p@entry=0x7f5e0369fe00, slot=slot@entry=0x7f5fa2cbd780)
|
|
at tm-threads.c:132
|
|
#16 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e0369fe00,
|
|
s=0x7f5fa2cbd780, tv=0x7f5fa100d100) at tm-threads.h:149
|
|
#17 AFPReadFromRing (ptv=ptv@entry=0x7f5e043e3140) at source-af-packet.c:874
|
|
#18 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d100,
|
|
data=0x7f5e043e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#19 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d100)
|
|
at tm-threads.c:336
|
|
#20 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e04fff700)
|
|
at pthread_create.c:308
|
|
#21 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 19 (Thread 0x7f5df57ff700 (LWP 194)):
|
|
#0 0x0000000000599480 in SCACSearch (mpm_ctx=<optimized out>,
|
|
mpm_thread_ctx=<optimized out>, pmq=0x7f5731c54130,
|
|
buf=0x7f5a03519314 "\331\324\006K\354\215\200\311x\272\355A\034\364:\312\062\r\332\021e\300.\251\254\001\327\335\237\060N<g\235\353\344\203\370\231'\210\246\312\356\315\066\243\351\207%\301\303G\314\061\326\326\267m}\356\241^j\256n\355\322\275\323S\375\060\fCz\001\213\307\355LX\206\063\375\234\310U\203\366\204M;^\005\342\376^\025~Xc\260\275\216\200\001a\001\032\350v\003GH\005u\"\341\347\r1\212\363kN\327K\375T\202?,\210\331\347r\203=\356\334\216\206X}6CB\020W6\333\273", buflen=<optimized out>) at util-mpm-ac.c:1324
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5df3e9fe00, smsg=0x0, det_ctx=0x7f5731c54000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d200,
|
|
---Type <return> to continue, or q <return> to quit---
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731c54000, p=p@entry=0x7f5df3e9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100d200, p=0x7f5df3e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d200,
|
|
p=p@entry=0x7f5df3e9fe00, slot=slot@entry=0x7f5fa2cbdf00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5df3e9fe00,
|
|
s=0x7f5fa2cbdf00, tv=0x7f5fa100d200) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5df4be3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d200,
|
|
data=0x7f5df4be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d200)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5df57ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 18 (Thread 0x7f5de5fff700 (LWP 195)):
|
|
#0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5de469fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d400,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731c80000, p=p@entry=0x7f5de469fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100d400, p=0x7f5de469fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d400,
|
|
p=p@entry=0x7f5de469fe00, slot=slot@entry=0x7f5fa2cbe680)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5de469fe00,
|
|
s=0x7f5fa2cbe680, tv=0x7f5fa100d400) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5de53e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d400,
|
|
data=0x7f5de53e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d400)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5de5fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 17 (Thread 0x7f5dd67ff700 (LWP 196)):
|
|
#0 0x000000000059948f in SCACSearch (mpm_ctx=<optimized out>,
|
|
mpm_thread_ctx=<optimized out>, pmq=0x7f5731cac130,
|
|
buf=0x7f59c8131308 "@\275\b\276\234]\212!\302\270\311!\277j\n\257\071\352\067\242\241\026,5S\n\341'\312t\bo\v\265\333!\224}\027qd\227\360\356r\255\\3\236,---Type <return> to continue, or q <return> to quit---
|
|
\372\250\306\224\"\020o=d\321\266\266@\226?r\244\301V\203u4D\204\202A}\307#\034\362\331\303\225\002\272\305TQ\342\211\027\247p\303\336\364\276G\005\322</\177\307\177\301\331y\340eN\267\006\202r\243Z\361\342\364\006[\017\307\364\021\225\006\031\305E\"\r\035\234J_q\230B\316\361\226b\177\365^\222\063",
|
|
buflen=<optimized out>) at util-mpm-ac.c:1324
|
|
#1 0x0000000000463139 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0,
|
|
flags=24 '\030', p=0x7f5dd4e9fe00, smsg=0x0, det_ctx=0x7f5731cac000,
|
|
de_ctx=0x7f5fa10ae000) at detect.c:1086
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d500,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731cac000, p=p@entry=0x7f5dd4e9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100d500, p=0x7f5dd4e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d500,
|
|
p=p@entry=0x7f5dd4e9fe00, slot=slot@entry=0x7f5fa2cbee00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dd4e9fe00,
|
|
s=0x7f5fa2cbee00, tv=0x7f5fa100d500) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5dd5be3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d500,
|
|
data=0x7f5dd5be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d500)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dd67ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 16 (Thread 0x7f5dc6fff700 (LWP 197)):
|
|
#0 0x0000000000461dd5 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d600,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731cd8000, p=p@entry=0x7f5dc569fe00)
|
|
at detect.c:1516
|
|
#1 0x0000000000463272 in Detect (tv=0x7f5fa100d600, p=0x7f5dc569fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d600,
|
|
p=p@entry=0x7f5dc569fe00, slot=slot@entry=0x7f5fa2cbf580)
|
|
at tm-threads.c:132
|
|
#3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dc569fe00,
|
|
s=0x7f5fa2cbf580, tv=0x7f5fa100d600) at tm-threads.h:149
|
|
#4 AFPReadFromRing (ptv=ptv@entry=0x7f5dc63e3140) at source-af-packet.c:874
|
|
#5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d600,
|
|
data=0x7f5dc63e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d600)
|
|
at tm-threads.c:336
|
|
#7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dc6fff700)
|
|
at pthread_create.c:308
|
|
#8 0x00007f5fc925128d in clone ()
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 15 (Thread 0x7f5db77ff700 (LWP 198)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5731d04130,
|
|
buf=0x7f59803a1944 "$\254FI\022\034$\024\233\006\361\276I\315\264\310\365\310\257d,E\360\374V\223\205\321\240\257U\243\060\337FhJ\304!\311\231r\316k3\026\302P\256\062A\262K\206\v\032,\320%L\001\224+\304-\205\026O\216\264%\270\323\\\251\vp\241\t0\035_\225F\251\202-\212\221`\b0\204\230\242\312&\201\370\021gA\206\270B\205\302\b\374F\r\223\300\251d\216\340\247a\221\236;\234\031\332\237\377\373\260`h", buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=8 '\b',
|
|
p=0x7f5db5e9fe00, smsg=0x0, det_ctx=0x7f5731d04000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d900,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731d04000, p=p@entry=0x7f5db5e9fe00)
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100d900, p=0x7f5db5e9fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d900,
|
|
p=p@entry=0x7f5db5e9fe00, slot=slot@entry=0x7f5fa2cbfd00)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5db5e9fe00,
|
|
s=0x7f5fa2cbfd00, tv=0x7f5fa100d900) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5db6be3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d900,
|
|
data=0x7f5db6be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d900)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5db77ff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 14 (Thread 0x7f5da7fff700 (LWP 199)):
|
|
#0 0x000000000055db82 in PacketPoolGetPacket () at tmqh-packetpool.c:272
|
|
#1 0x0000000000447fc9 in PacketGetFromQueueOrAlloc () at decode.c:166
|
|
#2 0x000000000053927c in AFPReadFromRing (ptv=ptv@entry=0x7f5da73e3140)
|
|
at source-af-packet.c:780
|
|
#3 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100da00,
|
|
data=0x7f5da73e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#4 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100da00)
|
|
at tm-threads.c:336
|
|
#5 0x00007f5fc9727dc5 in start_thread (arg=0x7f5da7fff700)
|
|
at pthread_create.c:308
|
|
#6 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
---Type <return> to continue, or q <return> to quit---
|
|
Thread 13 (Thread 0x7f5d987ff700 (LWP 200)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d987fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100dd00, data=0x7f5d97be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100dd00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d987ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 12 (Thread 0x7f5d88fff700 (LWP 201)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5d8769fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100de00,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731d84000, p=p@entry=0x7f5d8769fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100de00, p=0x7f5d8769fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100de00,
|
|
p=p@entry=0x7f5d8769fe00, slot=slot@entry=0x7f5fa2cc1380)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d8769fe00,
|
|
s=0x7f5fa2cc1380, tv=0x7f5fa100de00) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5d883e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100de00,
|
|
data=0x7f5d883e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100de00)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d88fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 11 (Thread 0x7f5d797ff700 (LWP 202)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d797fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100df00, data=0x7f5d78be3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100df00)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d797ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
---Type <return> to continue, or q <return> to quit---
|
|
|
|
Thread 10 (Thread 0x7f5d69fff700 (LWP 203)):
|
|
#0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=<optimized out>,
|
|
addrs_cnt=<optimized out>, a=a@entry=0x7f5d6869fe14)
|
|
at detect-engine-address.c:1660
|
|
#1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e000,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731de4000, p=p@entry=0x7f5d6869fe00)
|
|
at detect.c:1623
|
|
#2 0x0000000000463272 in Detect (tv=0x7f5fa100e000, p=0x7f5d6869fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e000,
|
|
p=p@entry=0x7f5d6869fe00, slot=slot@entry=0x7f5fa2e343c0)
|
|
at tm-threads.c:132
|
|
#4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d6869fe00,
|
|
s=0x7f5fa2e343c0, tv=0x7f5fa100e000) at tm-threads.h:149
|
|
#5 AFPReadFromRing (ptv=ptv@entry=0x7f5d693e3140) at source-af-packet.c:874
|
|
#6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e000,
|
|
data=0x7f5d693e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e000)
|
|
at tm-threads.c:336
|
|
#8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d69fff700)
|
|
at pthread_create.c:308
|
|
#9 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 9 (Thread 0x7f5d5a7ff700 (LWP 204)):
|
|
#0 AFPReadFromRing (ptv=ptv@entry=0x7f5d59be3140) at source-af-packet.c:747
|
|
#1 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e100,
|
|
data=0x7f5d59be3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#2 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e100)
|
|
at tm-threads.c:336
|
|
#3 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d5a7ff700)
|
|
at pthread_create.c:308
|
|
#4 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 8 (Thread 0x7f5d4afff700 (LWP 205)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>,
|
|
pmq=0x7f5731e3c130,
|
|
buf=0x7f58bcc7abc8 "GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: www.diariodecolima.com\r\nConnection: keep-alive\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.256"..., buflen=<optimized out>) at util-mpm-ac.c:1325
|
|
#1 0x0000000000462d46 in DetectMpmPrefilter (
|
|
sms_runflags=<synthetic pointer>, has_state=0, alproto=0, flags=4 '\004',
|
|
p=0x7f5d4969fe00, smsg=0x0, det_ctx=0x7f5731e3c000, de_ctx=0x7f5fa10ae000)
|
|
at detect.c:1095
|
|
#2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e200,
|
|
de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731e3c000, p=p@entry=0x7f5d4969fe00)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at detect.c:1462
|
|
#3 0x0000000000463272 in Detect (tv=0x7f5fa100e200, p=0x7f5d4969fe00,
|
|
data=<optimized out>, pq=<optimized out>, postpq=<optimized out>)
|
|
at detect.c:2031
|
|
#4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e200,
|
|
p=p@entry=0x7f5d4969fe00, slot=slot@entry=0x7f5fa2e352c0)
|
|
at tm-threads.c:132
|
|
#5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d4969fe00,
|
|
s=0x7f5fa2e352c0, tv=0x7f5fa100e200) at tm-threads.h:149
|
|
#6 AFPReadFromRing (ptv=ptv@entry=0x7f5d4a3e3140) at source-af-packet.c:874
|
|
#7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e200,
|
|
data=0x7f5d4a3e3140, slot=<optimized out>) at source-af-packet.c:1214
|
|
#8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e200)
|
|
at tm-threads.c:336
|
|
#9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d4afff700)
|
|
at pthread_create.c:308
|
|
#10 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 7 (Thread 0x7f5d3b7ff700 (LWP 206)):
|
|
#0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d3b7fdbc0)
|
|
at /usr/include/bits/poll2.h:46
|
|
#2 ReceiveAFPLoop (tv=0x7f5fa100e300, data=0x7f5d3abe3140,
|
|
slot=<optimized out>) at source-af-packet.c:1186
|
|
#3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e300)
|
|
at tm-threads.c:336
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d3b7ff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 6 (Thread 0x7f5d2bfff700 (LWP 207)):
|
|
#0 0x00007f5fc92489b3 in select () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x000000000056728a in UnixMain (this=this@entry=0x85b9a0 <command>)
|
|
at unix-manager.c:520
|
|
#2 0x00000000005674e2 in UnixManager (th_v=0x7f5fa100e400,
|
|
thread_data=<optimized out>) at unix-manager.c:910
|
|
#3 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e400)
|
|
at tm-threads.c:600
|
|
#4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2bfff700)
|
|
at pthread_create.c:308
|
|
#5 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 5 (Thread 0x7f5d2afff700 (LWP 208)):
|
|
#0 je_arena_dalloc_bin_locked (arena=arena@entry=0x7f5fc80e2f00,
|
|
chunk=chunk@entry=0x7f578f000000, ptr=ptr@entry=0x7f578f34df40,
|
|
mapelm=<optimized out>) at src/arena.c:1886
|
|
#1 0x00007f5fcc547881 in je_tcache_bin_flush_small (
|
|
---Type <return> to continue, or q <return> to quit---
|
|
tbin=tbin@entry=0x7f5d2a0061c8, binind=binind@entry=13, rem=63,
|
|
tcache=tcache@entry=0x7f5d2a006000) at src/tcache.c:127
|
|
#2 0x00007f5fcc525640 in je_tcache_dalloc_small (binind=13,
|
|
ptr=0x7f578302d440, tcache=0x7f5d2a006000)
|
|
at include/jemalloc/internal/tcache.h:402
|
|
#3 je_arena_dalloc (try_tcache=true, ptr=0x7f578302d440,
|
|
chunk=<optimized out>, arena=0x7f5fc8110400)
|
|
at include/jemalloc/internal/arena.h:1044
|
|
#4 je_idalloct (try_tcache=true, ptr=0x7f578302d440)
|
|
at include/jemalloc/internal/jemalloc_internal.h:898
|
|
#5 je_iqalloct (try_tcache=true, ptr=0x7f578302d440)
|
|
at include/jemalloc/internal/jemalloc_internal.h:917
|
|
#6 je_iqalloc (ptr=0x7f578302d440)
|
|
at include/jemalloc/internal/jemalloc_internal.h:924
|
|
#7 ifree (ptr=0x7f578302d440) at src/jemalloc.c:1233
|
|
#8 free (ptr=0x7f578302d440) at src/jemalloc.c:1308
|
|
#9 0x00000000004e95a7 in FlowFree (f=0x7f578302d440) at flow-util.c:80
|
|
#10 0x00000000004e2003 in FlowUpdateSpareFlows () at flow.c:143
|
|
#11 0x00000000004e6b2c in FlowManager (th_v=0x7f5fa100e500,
|
|
thread_data=0x7f5d2a00e040) at flow-manager.c:616
|
|
#12 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e500)
|
|
at tm-threads.c:600
|
|
#13 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2afff700)
|
|
at pthread_create.c:308
|
|
#14 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 4 (Thread 0x7f5d293ff700 (LWP 209)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x00000000004e5c3f in FlowRecycler (th_v=0x7f5fa100e600,
|
|
thread_data=0x7f5d2840e058) at flow-manager.c:844
|
|
#2 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e600)
|
|
at tm-threads.c:600
|
|
#3 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d293ff700)
|
|
at pthread_create.c:308
|
|
#4 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 3 (Thread 0x7f5d283ff700 (LWP 210)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x0000000000444e1f in StatsWakeupThread (arg=0x7f5fa100e700)
|
|
at counters.c:435
|
|
#2 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d283ff700)
|
|
at pthread_create.c:308
|
|
#3 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 2 (Thread 0x7f5d27bfe700 (LWP 211)):
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x0000000000445c7f in StatsMgmtThread (arg=0x7f5fa100e800)
|
|
at counters.c:359
|
|
#2 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d27bfe700)
|
|
at pthread_create.c:308
|
|
#3 0x00007f5fc925128d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
|
|
|
|
Thread 1 (Thread 0x7f5fcc962940 (LWP 1)):
|
|
#0 0x00007f5fc921849d in nanosleep ()
|
|
at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x00007f5fc92490d4 in usleep (useconds=useconds@entry=1000)
|
|
at ../sysdeps/unix/sysv/linux/usleep.c:32
|
|
#2 0x000000000048100d in DetectEngineReloadThreads (
|
|
new_de_ctx=new_de_ctx@entry=0x7f5fa10ae000) at detect-engine.c:704
|
|
#3 0x00000000004846b9 in DetectEngineReload (filename=<optimized out>,
|
|
suri=suri@entry=0x7fff4516d190) at detect-engine.c:2559
|
|
#4 0x0000000000410dc4 in main (argc=<optimized out>, argv=<optimized out>)
|
|
at suricata.c:2439
|
|
(gdb)
|