|
Starting program: /usr/bin/suricata -c /etc/suricata/suricata.yaml --af-packet -vv
|
|
[Thread debugging using libthread_db enabled]
|
|
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
|
|
[New Thread 0x7f23a3e13700 (LWP 17948)]
|
|
[New Thread 0x7f23a3612700 (LWP 17971)]
|
|
[New Thread 0x7f23a2e11700 (LWP 17978)]
|
|
[New Thread 0x7f23a2610700 (LWP 17981)]
|
|
[New Thread 0x7f23a1e0f700 (LWP 17984)]
|
|
[New Thread 0x7f23a160e700 (LWP 17987)]
|
|
[New Thread 0x7f23a0e0d700 (LWP 18014)]
|
|
[New Thread 0x7f2333fff700 (LWP 18017)]
|
|
[New Thread 0x7f23337fe700 (LWP 18020)]
|
|
[New Thread 0x7f2332ffd700 (LWP 18025)]
|
|
[New Thread 0x7f23327fc700 (LWP 18048)]
|
|
[New Thread 0x7f2331ffb700 (LWP 18055)]
|
|
[New Thread 0x7f23317fa700 (LWP 18058)]
|
|
[New Thread 0x7f2330ff9700 (LWP 18061)]
|
|
[New Thread 0x7f22bffff700 (LWP 18084)]
|
|
[New Thread 0x7f22bf7fe700 (LWP 18091)]
|
|
[New Thread 0x7f22beffd700 (LWP 18095)]
|
|
[New Thread 0x7f22be7fc700 (LWP 18099)]
|
|
[New Thread 0x7f22bdffb700 (LWP 18100)]
|
|
[New Thread 0x7f22bd7fa700 (LWP 18101)]
|
|
|
|
Program received signal SIGSEGV, Segmentation fault.
|
|
[Switching to Thread 0x7f23a2610700 (LWP 17981)]
|
|
0x000000000060011e in LuaPushStringBuffer (luastate=0x5f2e3378,
|
|
input=0x7f210f804010 "UnityWeb", input_len=8371474) at util-lua.c:264
|
|
264 memset(buf, 0x00, buflen);
|
|
|
|
Thread 21 (Thread 0x7f22bd7fa700 (LWP 18101)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x0000000000453da0 in StatsMgmtThread (arg=0x36ce95b0) at counters.c:376
|
|
#2 0x00007f23e9349182 in start_thread (arg=0x7f22bd7fa700)
|
|
at pthread_create.c:312
|
|
#3 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 20 (Thread 0x7f22bdffb700 (LWP 18100)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x000000000045436a in StatsWakeupThread (arg=0x36ce92b0) at counters.c:454
|
|
#2 0x00007f23e9349182 in start_thread (arg=0x7f22bdffb700)
|
|
at pthread_create.c:312
|
|
#3 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 19 (Thread 0x7f22be7fc700 (LWP 18099)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 ()
|
|
at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
|
|
#1 0x000000000052981d in FlowRecycler (th_v=0x36ce8f00,
|
|
thread_data=0x7f22880008c0) at flow-manager.c:844
|
|
#2 0x00000000005cb288 in TmThreadsManagement (td=0x36ce8f00)
|
|
at tm-threads.c:602
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f22be7fc700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 18 (Thread 0x7f22beffd700 (LWP 18095)):
|
|
#0 0x00000000005c6842 in PacketPoolIsEmpty (pool=0x7f22beffd540)
|
|
at tmqh-packetpool.c:142
|
|
#1 0x00000000005c68df in PacketPoolWait () at tmqh-packetpool.c:160
|
|
#2 0x00000000005c690d in PacketPoolWaitForN (n=9) at tmqh-packetpool.c:180
|
|
#3 0x0000000000528096 in FlowTimeoutHash (ts=0x7f22beffbc60, try_cnt=0,
|
|
hash_min=0, hash_max=10485760, counters=0x7f22beffbc80)
|
|
at flow-manager.c:386
|
|
#4 0x0000000000528a14 in FlowManager (th_v=0x36ce8b30,
|
|
thread_data=0x7f22980008e0) at flow-manager.c:620
|
|
#5 0x00000000005cb288 in TmThreadsManagement (td=0x36ce8b30)
|
|
at tm-threads.c:602
|
|
#6 0x00007f23e9349182 in start_thread (arg=0x7f22beffd700)
|
|
at pthread_create.c:312
|
|
#7 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 17 (Thread 0x7f22bf7fe700 (LWP 18091)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce7d00, data=0x7f22abfffe80,
|
|
slot=0x36ce7e30) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce7d00)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f22bf7fe700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 16 (Thread 0x7f22bffff700 (LWP 18084)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce6f30, data=0x7f22b7fffe80,
|
|
slot=0x36ce7060) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce6f30)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f22bffff700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 15 (Thread 0x7f2330ff9700 (LWP 18061)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce6160, data=0x7f22cffffe80,
|
|
slot=0x36ce6290) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce6160)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f2330ff9700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 14 (Thread 0x7f23317fa700 (LWP 18058)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce5390, data=0x7f22dffffe80,
|
|
slot=0x36ce54c0) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce5390)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23317fa700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 13 (Thread 0x7f2331ffb700 (LWP 18055)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce45c0, data=0x7f22effffe80,
|
|
slot=0x36ce46f0) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce45c0)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f2331ffb700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 12 (Thread 0x7f23327fc700 (LWP 18048)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce37f0, data=0x7f22fffffe80,
|
|
slot=0x36ce3920) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce37f0)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23327fc700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 11 (Thread 0x7f2332ffd700 (LWP 18025)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce2a20, data=0x7f230ffffe80,
|
|
slot=0x36ce2b50) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce2a20)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f2332ffd700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 10 (Thread 0x7f23337fe700 (LWP 18020)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce1c70, data=0x7f231ffffe80,
|
|
slot=0x36ce1d80) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce1c70)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23337fe700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 9 (Thread 0x7f2333fff700 (LWP 18017)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce0e80, data=0x7f232bfffe80,
|
|
slot=0x36ce0fb0) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce0e80)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f2333fff700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 8 (Thread 0x7f23a0e0d700 (LWP 18014)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce00b0, data=0x7f2343fffe80,
|
|
slot=0x36ce01e0) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce00b0)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23a0e0d700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 7 (Thread 0x7f23a160e700 (LWP 17987)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdf2e0, data=0x7f2353fffe80,
|
|
slot=0x36cdf410) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdf2e0)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23a160e700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 6 (Thread 0x7f23a1e0f700 (LWP 17984)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cde510, data=0x7f2363fffe80,
|
|
slot=0x36cde640) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cde510)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23a1e0f700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 5 (Thread 0x7f23a2610700 (LWP 17981)):
|
|
#0 0x000000000060011e in LuaPushStringBuffer (luastate=0x5f2e3378,
|
|
input=0x7f210f804010 "UnityWeb", input_len=8371474) at util-lua.c:264
|
|
#1 0x00000000004f4eb9 in DetectLuaMatchBuffer (det_ctx=0x7f212562dad0,
|
|
s=0x3cc5fcc0, sm=0x3cc60b30, buffer=0x7f210f804010 "UnityWeb",
|
|
buffer_len=8371474, offset=75, f=0x35aaa410, flow_lock=0)
|
|
at detect-lua.c:325
|
|
#2 0x00000000004acc98 in DetectEngineContentInspection (de_ctx=0x36ce98b0,
|
|
det_ctx=0x7f212562dad0, s=0x3cc5fcc0, sm=0x3cc60b30, f=0x35aaa410,
|
|
buffer=0x7f210f804010 "UnityWeb", buffer_len=8371474,
|
|
stream_start_offset=0, inspection_mode=9 '\t', data=0x0)
|
|
at detect-engine-content-inspection.c:547
|
|
#3 0x00000000004acd95 in DetectEngineContentInspection (de_ctx=0x36ce98b0,
|
|
det_ctx=0x7f212562dad0, s=0x3cc5fcc0, sm=0x3cc60ac0, f=0x35aaa410,
|
|
buffer=0x7f210f804010 "UnityWeb", buffer_len=8371474,
|
|
stream_start_offset=0, inspection_mode=9 '\t', data=0x0)
|
|
at detect-engine-content-inspection.c:582
|
|
#4 0x00000000004b457f in DetectEngineInspectHttpServerBody (tv=0x36cdd740,
|
|
de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, s=0x3cc5fcc0, f=0x35aaa410,
|
|
flags=8 '\b', alstate=0x7f22d9e27a40, tx=0x7f22d9e24060, tx_id=77)
|
|
at detect-engine-hsbd.c:361
|
|
#5 0x00000000004cf1d8 in DeStateDetectStartDetection (tv=0x36cdd740,
|
|
de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, s=0x3cc5fcc0, p=0x7f235dcff5e0,
|
|
f=0x35aaa410, flags=8 '\b', alproto=1, alversion=7 '\a')
|
|
at detect-engine-state.c:528
|
|
#6 0x000000000047f349 in SigMatchSignatures (th_v=0x36cdd740,
|
|
de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, p=0x7f235dcff5e0)
|
|
at detect.c:1764
|
|
#7 0x000000000047fc48 in Detect (tv=0x36cdd740, p=0x7f235dcff5e0,
|
|
data=0x7f212562dad0, pq=0x36cddc70, postpq=0x0) at detect.c:2033
|
|
#8 0x00000000005c9b4b in TmThreadsSlotVarRun (tv=0x36cdd740,
|
|
p=0x7f235dcff5e0, slot=0x36cdd9b0) at tm-threads.c:134
|
|
#9 0x000000000058fa40 in TmThreadsSlotProcessPkt (tv=0x36cdd740,
|
|
s=0x36cdd9b0, p=0x7f235dcff5e0) at tm-threads.h:150
|
|
#10 0x0000000000591958 in AFPReadFromRing (ptv=0x7f2373fffe80)
|
|
at source-af-packet.c:875
|
|
#11 0x0000000000592cd5 in ReceiveAFPLoop (tv=0x36cdd740, data=0x7f2373fffe80,
|
|
slot=0x36cdd870) at source-af-packet.c:1215
|
|
#12 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdd740)
|
|
at tm-threads.c:338
|
|
#13 0x00007f23e9349182 in start_thread (arg=0x7f23a2610700)
|
|
at pthread_create.c:312
|
|
#14 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 4 (Thread 0x7f23a2e11700 (LWP 17978)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdc970, data=0x7f2383fffe80,
|
|
slot=0x36cdcaa0) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdc970)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23a2e11700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 3 (Thread 0x7f23a3612700 (LWP 17971)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdbba0, data=0x7f2393fffe80,
|
|
slot=0x36cdbcd0) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdbba0)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23a3612700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 2 (Thread 0x7f23a3e13700 (LWP 17948)):
|
|
#0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdaae0, data=0x7f239ffffe80,
|
|
slot=0x36cdaf00) at source-af-packet.c:1187
|
|
#2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdaae0)
|
|
at tm-threads.c:338
|
|
#3 0x00007f23e9349182 in start_thread (arg=0x7f23a3e13700)
|
|
at pthread_create.c:312
|
|
#4 0x00007f23e7fcf47d in clone ()
|
|
at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
|
|
|
|
Thread 1 (Thread 0x7f23eacb8940 (LWP 17740)):
|
|
#0 0x00007f23e7f95f3d in nanosleep () at ../sysdeps/unix/syscall-template.S:81
|
|
#1 0x00007f23e7fc74a4 in usleep (useconds=<optimized out>)
|
|
at ../sysdeps/unix/sysv/linux/usleep.c:32
|
|
#2 0x00000000005c4220 in main (argc=5, argv=0x7ffcb81cf368) at suricata.c:2501
|
|
A debugging session is active.
|
|
|
|
Inferior 1 [process 17740] will be killed.
|
|
|
|
Quit anyway? (y or n)
|