|
GNU gdb (Ubuntu/Linaro 7.4-2012.04-0ubuntu2.1) 7.4-2012.04
|
|
Copyright (C) 2012 Free Software Foundation, Inc.
|
|
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
|
|
This is free software: you are free to change and redistribute it.
|
|
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
|
|
and "show warranty" for details.
|
|
This GDB was configured as "x86_64-linux-gnu".
|
|
For bug reporting instructions, please see:
|
|
<http://bugs.launchpad.net/gdb-linaro/>...
|
|
Reading symbols from /usr/local/bin/suricata...done.
|
|
|
|
warning: core file may not match specified executable file.
|
|
[New LWP 6094]
|
|
[New LWP 6096]
|
|
[New LWP 6099]
|
|
[New LWP 6095]
|
|
[New LWP 6100]
|
|
[New LWP 6102]
|
|
[New LWP 6103]
|
|
[New LWP 6104]
|
|
[New LWP 6105]
|
|
[New LWP 6106]
|
|
[New LWP 6107]
|
|
[New LWP 6109]
|
|
[New LWP 6097]
|
|
[New LWP 6113]
|
|
[New LWP 6110]
|
|
[New LWP 6112]
|
|
[New LWP 6093]
|
|
[New LWP 6098]
|
|
[New LWP 6108]
|
|
[New LWP 6111]
|
|
[New LWP 6101]
|
|
|
|
warning: Can't read pathname for load map: Input/output error.
|
|
[Thread debugging using libthread_db enabled]
|
|
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
|
|
Core was generated by `suricata --pfring-int=eth3 --pfring-cluster-id=99 --pfring-cluster-type=cluster'.
|
|
Program terminated with signal 11, Segmentation fault.
|
|
#0 AppLayerProtoDetectPMMatchSignature (buflen=8, buf=0x7f39c2d45920 "\005", s=<optimized out>, ipproto=<optimized out>) at app-layer-detect-proto.c:173
|
|
173 if (s->cd->offset > buflen) {
|
|
(gdb)
|
|
(gdb)
|
|
(gdb) thread apply all bt
|
|
|
|
Thread 21 (Thread 0x7f3943fff700 (LWP 6101)):
|
|
#0 0x00007f3a03f6deb4 in __pthread_mutex_lock (mutex=0x10213b30) at pthread_mutex_lock.c:61
|
|
#1 0x0000000000461a15 in SigMatchSignatures (th_v=0xa37e1060, de_ctx=0xa0fd2260, det_ctx=0x7f393c013b60, p=0x6e974d0) at detect.c:1129
|
|
#2 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#3 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37e1060, p=0x6e974d0, slot=<optimized out>) at tm-threads.c:559
|
|
#5 0x000000000051fc1f in TmThreadsSlotVarRun (tv=0xa37e1060, p=0x6707600, slot=<optimized out>) at tm-threads.c:585
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x6707600, s=0xa37e1290, tv=0xa37e1060) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0xa37e1060, data=0x7f393c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37e1060) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f3943fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 20 (Thread 0x7f38b37fe700 (LWP 6111)):
|
|
#0 0x00007f3a03f6e18b in __pthread_mutex_trylock (mutex=0x7f39fe852d60) at pthread_mutex_trylock.c:65
|
|
#1 0x00000000004d6872 in FlowTimeoutHash (ts=0x7f38b37fd520, try_cnt=0, counters=0x7f38b37fd540) at flow-manager.c:347
|
|
#2 0x00000000004d6e04 in FlowManagerThread (td=0xa378f220) at flow-manager.c:481
|
|
#3 0x00007f3a03f6be9a in start_thread (arg=0x7f38b37fe700) at pthread_create.c:308
|
|
#4 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#5 0x0000000000000000 in ?? ()
|
|
|
|
Thread 19 (Thread 0x7f38d3fff700 (LWP 6108)):
|
|
#0 __memcpy_ssse3_back () at ../sysdeps/x86_64/multiarch/memcpy-ssse3-back.S:88
|
|
#1 0x00007f3a045d0844 in pfring_mod_recv () from /usr/local/pfring/lib/libpcap.so.1
|
|
#2 0x00007f3a045ceb9c in pfring_recv () from /usr/local/pfring/lib/libpcap.so.1
|
|
#3 0x00000000005090ad in ReceivePfringLoop (tv=0xa3668c10, data=0x7f38cc0008c0, slot=<optimized out>) at source-pfring.c:316
|
|
#4 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa3668c10) at tm-threads.c:703
|
|
#5 0x00007f3a03f6be9a in start_thread (arg=0x7f38d3fff700) at pthread_create.c:308
|
|
#6 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#7 0x0000000000000000 in ?? ()
|
|
|
|
Thread 18 (Thread 0x7f3973fff700 (LWP 6098)):
|
|
#0 0x000000000054882b in SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f396c013c30, buf=0x49f46ea "\001", buflen=1425) at util-mpm-ac.c:1284
|
|
#1 0x0000000000462cd3 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=4 '\004', p=0x49f3f10, smsg=0x0, det_ctx=0x7f396c013b60, de_ctx=0xa0fd2260)
|
|
at detect.c:972
|
|
#2 SigMatchSignatures (th_v=0x584606fb0, de_ctx=0xa0fd2260, det_ctx=0x7f396c013b60, p=0x49f3f10) at detect.c:1300
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x584606fb0, p=0x49f3f10, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x49f3f10, s=0xa377e8a0, tv=0x584606fb0) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0x584606fb0, data=0x7f396c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x584606fb0) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f3973fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 17 (Thread 0x7f3a054e3840 (LWP 6093)):
|
|
#0 0x00007f3a032bf08d in nanosleep () at ../sysdeps/unix/syscall-template.S:82
|
|
#1 0x00007f3a032eceb4 in usleep (useconds=<optimized out>) at ../sysdeps/unix/sysv/linux/usleep.c:33
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#2 0x000000000040f7df in main (argc=<optimized out>, argv=<optimized out>) at suricata.c:2209
|
|
|
|
Thread 16 (Thread 0x7f38abfff700 (LWP 6112)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215
|
|
#1 0x0000000000446112 in SCPerfWakeupThread (arg=0xa38cf910) at counters.c:408
|
|
#2 0x00007f3a03f6be9a in start_thread (arg=0x7f38abfff700) at pthread_create.c:308
|
|
#3 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#4 0x0000000000000000 in ?? ()
|
|
|
|
Thread 15 (Thread 0x7f38b3fff700 (LWP 6110)):
|
|
#0 0x00007f3a032ec763 in select () at ../sysdeps/unix/syscall-template.S:82
|
|
#1 0x0000000000527320 in UnixMain (this=0x7ffea0) at unix-manager.c:508
|
|
#2 0x000000000052801a in UnixManagerThread (td=0xa378efe0) at unix-manager.c:867
|
|
#3 0x00007f3a03f6be9a in start_thread (arg=0x7f38b3fff700) at pthread_create.c:308
|
|
#4 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#5 0x0000000000000000 in ?? ()
|
|
|
|
Thread 14 (Thread 0x7f38ab7fe700 (LWP 6113)):
|
|
#0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215
|
|
#1 0x0000000000449a92 in SCPerfMgmtThread (arg=0xa374c0a0) at counters.c:340
|
|
#2 0x00007f3a03f6be9a in start_thread (arg=0x7f38ab7fe700) at pthread_create.c:308
|
|
#3 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#4 0x0000000000000000 in ?? ()
|
|
|
|
Thread 13 (Thread 0x7f3983fff700 (LWP 6097)):
|
|
#0 PmqReset (pmq=0x7f397c013c30) at /usr/include/x86_64-linux-gnu/bits/string3.h:85
|
|
#1 0x0000000000488e60 in PacketPatternCleanup (t=<optimized out>, det_ctx=0x7f397c013b60) at detect-engine-mpm.c:737
|
|
#2 0x0000000000461f36 in SigMatchSignatures (th_v=0x49bc089f0, de_ctx=0xa0fd2260, det_ctx=0x7f397c013b60, p=0x36c3d70) at detect.c:1570
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x49bc089f0, p=0x36c3d70, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x36c3d70, s=0xa371b2f0, tv=0x49bc089f0) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0x49bc089f0, data=0x7f397c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x49bc089f0) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f3983fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 12 (Thread 0x7f38c3fff700 (LWP 6109)):
|
|
#0 0x000000000054882b in SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f38bc013c30, buf=0x3911bfa "\001", buflen=1438) at util-mpm-ac.c:1284
|
|
#1 0x0000000000462cd3 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=8 '\b', p=0x3911420, smsg=0x0, det_ctx=0x7f38bc013b60, de_ctx=0xa0fd2260)
|
|
at detect.c:972
|
|
#2 SigMatchSignatures (th_v=0xa37f88b0, de_ctx=0xa0fd2260, det_ctx=0x7f38bc013b60, p=0x3911420) at detect.c:1300
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37f88b0, p=0x3911420, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x3911420, s=0xa36b7740, tv=0xa37f88b0) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0xa37f88b0, data=0x7f38bc0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37f88b0) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f38c3fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 11 (Thread 0x7f38e3fff700 (LWP 6107)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f38dc013c30,
|
|
buf=0x6a80b2a "\265\005}\017)\272r\300\253B\354\305w\250\343vZ\240\254\006Z\375\360\071\320/\362\255\345\071\201\255\355\337\003\372\272\a\244\327q\b\216\"8\250\326o0\214\314\320\361+^\276\307\370x.\333Ƽ\236\026\330v\312\372\031\342\230륧t\022\316\005R\227\320J\220\264\257\025\225}H\347\005%o\"8\a\376^\362\067(\034I\210\350^\002\306}7\366M\002n\242\361lqz\203<\257\275\351\025\061\336&\307\\\243\005M.@\365l\346HyO6\300\320W8\257\215\017!o\\)\201v\350\355h\252\225\225\372\257\222K\204\277\274\026Z%\275\303\035\002\023\020>\363\312R\270\220\066\320/\271\360\211Su\005\062\261\324\336\316", <incomplete sequence \353>..., buflen=1185) at util-mpm-ac.c:1285
|
|
#1 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=4 '\004', p=0x6a80350, smsg=0x0, det_ctx=0x7f38dc013b60, de_ctx=0xa0fd2260)
|
|
at detect.c:963
|
|
#2 SigMatchSignatures (th_v=0xa37e49e0, de_ctx=0xa0fd2260, det_ctx=0x7f38dc013b60, p=0x6a80350) at detect.c:1300
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37e49e0, p=0x6a80350, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x6a80350, s=0xa37e4c10, tv=0xa37e49e0) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0xa37e49e0, data=0x7f38dc0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37e49e0) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f38e3fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 10 (Thread 0x7f38f3fff700 (LWP 6106)):
|
|
#0 SigMatchSignaturesBuildMatchArray (det_ctx=0x7f38ec013b60, p=0x290eb50, mask=<optimized out>, alproto=0) at detect-simd.c:171
|
|
#1 0x0000000000461dbe in SigMatchSignatures (th_v=0xa376e730, de_ctx=0xa0fd2260, det_ctx=0x7f38ec013b60, p=0x290eb50) at detect.c:1305
|
|
#2 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#3 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa376e730, p=0x290eb50, slot=<optimized out>) at tm-threads.c:559
|
|
#5 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x290eb50, s=0xa3726530, tv=0xa376e730) at tm-threads.h:142
|
|
#6 ReceivePfringLoop (tv=0xa376e730, data=0x7f38ec0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#7 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa376e730) at tm-threads.c:703
|
|
#8 0x00007f3a03f6be9a in start_thread (arg=0x7f38f3fff700) at pthread_create.c:308
|
|
#9 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#10 0x0000000000000000 in ?? ()
|
|
|
|
Thread 9 (Thread 0x7f3903fff700 (LWP 6105)):
|
|
#0 0x0000000000468106 in SigMatchSignaturesBuildMatchArray (det_ctx=0x7f38fc013b60, p=0x2f5b440, mask=<optimized out>, alproto=0) at detect-simd.c:171
|
|
#1 0x0000000000461dbe in SigMatchSignatures (th_v=0xa36e5190, de_ctx=0xa0fd2260, det_ctx=0x7f38fc013b60, p=0x2f5b440) at detect.c:1305
|
|
#2 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#3 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa36e5190, p=0x2f5b440, slot=<optimized out>) at tm-threads.c:559
|
|
#5 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x2f5b440, s=0xa37e8ee0, tv=0xa36e5190) at tm-threads.h:142
|
|
#6 ReceivePfringLoop (tv=0xa36e5190, data=0x7f38fc0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#7 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa36e5190) at tm-threads.c:703
|
|
#8 0x00007f3a03f6be9a in start_thread (arg=0x7f3903fff700) at pthread_create.c:308
|
|
#9 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#10 0x0000000000000000 in ?? ()
|
|
|
|
Thread 8 (Thread 0x7f3913fff700 (LWP 6104)):
|
|
#0 __ctype_tolower_loc () at ../include/ctype.h:45
|
|
#1 0x000000000054880c in SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f390c013c30, buf=0x46ebab6 "\025ݺ8\211\223R\006\207", buflen=1460) at util-mpm-ac.c:1284
|
|
#2 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=8 '\b', p=0x46eb2d0, smsg=0x0, det_ctx=0x7f390c013b60, de_ctx=0xa0fd2260)
|
|
---Type <return> to continue, or q <return> to quit---
|
|
at detect.c:963
|
|
#3 SigMatchSignatures (th_v=0xa37d80a0, de_ctx=0xa0fd2260, det_ctx=0x7f390c013b60, p=0x46eb2d0) at detect.c:1300
|
|
#4 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#5 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#6 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37d80a0, p=0x46eb2d0, slot=<optimized out>) at tm-threads.c:559
|
|
#7 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x46eb2d0, s=0xa37d82d0, tv=0xa37d80a0) at tm-threads.h:142
|
|
#8 ReceivePfringLoop (tv=0xa37d80a0, data=0x7f390c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#9 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37d80a0) at tm-threads.c:703
|
|
#10 0x00007f3a03f6be9a in start_thread (arg=0x7f3913fff700) at pthread_create.c:308
|
|
#11 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#12 0x0000000000000000 in ?? ()
|
|
|
|
Thread 7 (Thread 0x7f3923fff700 (LWP 6103)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f391c013c30, buf=0x64fa9ba "\001", buflen=1402) at util-mpm-ac.c:1285
|
|
#1 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=4 '\004', p=0x64fa1e0, smsg=0x0, det_ctx=0x7f391c013b60, de_ctx=0xa0fd2260)
|
|
at detect.c:963
|
|
#2 SigMatchSignatures (th_v=0xa36b6190, de_ctx=0xa0fd2260, det_ctx=0x7f391c013b60, p=0x64fa1e0) at detect.c:1300
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa36b6190, p=0x64fa1e0, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x64fa1e0, s=0xa3729330, tv=0xa36b6190) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0xa36b6190, data=0x7f391c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa36b6190) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f3923fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 6 (Thread 0x7f3933fff700 (LWP 6102)):
|
|
#0 0x000000000056e433 in RingBufferMrMwPut (rb=0x2400d30, ptr=0x6dbd280) at util-ringbuffer.c:768
|
|
#1 0x000000000050916d in TmThreadsSlotProcessPkt (p=0x6dbd280, s=0xa37b9da0, tv=0xa3776ff0) at tm-threads.h:156
|
|
#2 ReceivePfringLoop (tv=0xa3776ff0, data=0x7f392c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#3 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa3776ff0) at tm-threads.c:703
|
|
#4 0x00007f3a03f6be9a in start_thread (arg=0x7f3933fff700) at pthread_create.c:308
|
|
#5 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#6 0x0000000000000000 in ?? ()
|
|
|
|
Thread 5 (Thread 0x7f3953fff700 (LWP 6100)):
|
|
#0 0x000000000050e1de in StreamTcpValidateAck (p=0xfb44d30, stream=0x7f355c6aa428, ssn=<optimized out>) at stream-tcp.c:5145
|
|
#1 HandleEstablishedPacketToServer (pq=0x7f394c0129d0, p=0xfb44d30, ssn=0x7f355c6aa420, tv=0x66d4e2fc0, stt=<optimized out>) at stream-tcp.c:1848
|
|
#2 StreamTcpPacketStateEstablished (tv=0x66d4e2fc0, p=0xfb44d30, stt=0x7f394c0129c0, ssn=0x7f355c6aa420, pq=0x7f394c0129d0) at stream-tcp.c:2322
|
|
#3 0x0000000000511b6e in StreamTcpPacket (tv=0x66d4e2fc0, p=0xfb44d30, stt=0x7f394c0129c0, pq=0xa3714170) at stream-tcp.c:4242
|
|
#4 0x0000000000512dac in StreamTcp (tv=0x66d4e2fc0, p=0xfb44d30, data=0x7f394c0129c0, pq=0xa3714170, postpq=<optimized out>) at stream-tcp.c:4484
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x66d4e2fc0, p=0xfb44d30, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0xfb44d30, s=0xa3713ff0, tv=0x66d4e2fc0) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0x66d4e2fc0, data=0x7f394c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x66d4e2fc0) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f3953fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 4 (Thread 0x7f39bd174700 (LWP 6095)):
|
|
---Type <return> to continue, or q <return> to quit---
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f399c013c30,
|
|
buf=0x45323f6 "\027\003\001\005\300\021\002\275\355\034\003\310G\216\066p~]\312\060\315\024\241\023NK\315\321\177\230]9\277\334U7\233\227\302M9)\217L\304\312Ʀ\274\b\244\277\217_\026\230\264\372P\371\311k\320\034\060\367o?\374\322\355\335\023\066k\235u9t\272W\320\326\311[}\246Y\270\v\244`|Ԅ\267\345։U\023\210S%\330G\r\f\251\347\vF\223\365M\251װ\276\315mt\016\257\377\221L\260\347\352}Ph\371\217\004\311\070$\203\003փnr\364\263!\243\070\062\301\343\nh\371YW\251\237\260\230A\312']\345\233>\314\060\221K\275\006\231\006A\245", buflen=1460) at util-mpm-ac.c:1285
|
|
#1 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=8 '\b', p=0x4531c10, smsg=0x0, det_ctx=0x7f399c013b60, de_ctx=0xa0fd2260)
|
|
at detect.c:963
|
|
#2 SigMatchSignatures (th_v=0xa41079b0, de_ctx=0xa0fd2260, det_ctx=0x7f399c013b60, p=0x4531c10) at detect.c:1300
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa41079b0, p=0x4531c10, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x4531c10, s=0xa36e72c0, tv=0xa41079b0) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0xa41079b0, data=0x7f399c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa41079b0) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f39bd174700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 3 (Thread 0x7f3963fff700 (LWP 6099)):
|
|
#0 SCACSearch (mpm_ctx=<optimized out>, mpm_thread_ctx=<optimized out>, pmq=0x7f395c013c30, buf=0x7e2f68a "\001", buflen=1429) at util-mpm-ac.c:1285
|
|
#1 0x0000000000462cd3 in DetectMpmPrefilter (sms_runflags=<synthetic pointer>, alstate=0x0, alproto=0, flags=4 '\004', p=0x7e2eeb0, smsg=0x0, det_ctx=0x7f395c013b60, de_ctx=0xa0fd2260)
|
|
at detect.c:972
|
|
#2 SigMatchSignatures (th_v=0x495dff250, de_ctx=0xa0fd2260, det_ctx=0x7f395c013b60, p=0x7e2eeb0) at detect.c:1300
|
|
#3 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#4 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x495dff250, p=0x7e2eeb0, slot=<optimized out>) at tm-threads.c:559
|
|
#6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x7e2eeb0, s=0xa37b48a0, tv=0x495dff250) at tm-threads.h:142
|
|
#7 ReceivePfringLoop (tv=0x495dff250, data=0x7f395c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x495dff250) at tm-threads.c:703
|
|
#9 0x00007f3a03f6be9a in start_thread (arg=0x7f3963fff700) at pthread_create.c:308
|
|
#10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#11 0x0000000000000000 in ?? ()
|
|
|
|
Thread 2 (Thread 0x7f3993fff700 (LWP 6096)):
|
|
#0 0x00000000004680de in SigMatchSignaturesBuildMatchArray (det_ctx=0x7f398c013b60, p=0x6525bf0, mask=<optimized out>, alproto=0) at detect-simd.c:167
|
|
#1 0x0000000000461dbe in SigMatchSignatures (th_v=0xa367b290, de_ctx=0xa0fd2260, det_ctx=0x7f398c013b60, p=0x6525bf0) at detect.c:1305
|
|
#2 0x00000000004632f5 in Detect (data=<optimized out>, p=<optimized out>, tv=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1708
|
|
#3 Detect (tv=<optimized out>, p=<optimized out>, data=<optimized out>, pq=<optimized out>, postpq=<optimized out>) at detect.c:1680
|
|
#4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa367b290, p=0x6525bf0, slot=<optimized out>) at tm-threads.c:559
|
|
#5 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x6525bf0, s=0xa36c2f40, tv=0xa367b290) at tm-threads.h:142
|
|
#6 ReceivePfringLoop (tv=0xa367b290, data=0x7f398c0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#7 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa367b290) at tm-threads.c:703
|
|
#8 0x00007f3a03f6be9a in start_thread (arg=0x7f3993fff700) at pthread_create.c:308
|
|
#9 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#10 0x0000000000000000 in ?? ()
|
|
|
|
Thread 1 (Thread 0x7f39c2d48700 (LWP 6094)):
|
|
#0 AppLayerProtoDetectPMMatchSignature (buflen=8, buf=0x7f39c2d45920 "\005", s=<optimized out>, ipproto=<optimized out>) at app-layer-detect-proto.c:173
|
|
#1 AppLayerProtoDetectPMGetProto (pm_results=0x7f39c2d44f70, ipproto=6 '\006', direction=<optimized out>, buflen=30, buf=0x7f39c2d45920 "\005", tctx=0x7f39ac0130f0, f=<optimized out>)
|
|
at app-layer-detect-proto.c:250
|
|
#2 AppLayerProtoDetectGetProto (tctx=0x7f39ac0130f0, f=0x1b9621f0, buf=0x7f39c2d45920 "\005", buflen=30, ipproto=6 '\006', direction=<optimized out>) at app-layer-detect-proto.c:1213
|
|
#3 0x00000000004191c1 in AppLayerHandleTCPData (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, p=0x7f38a6d1cb10, f=0x1b9621f0, ssn=0x7f33c277a000, stream=0x7f33c277a008, data=0x7f39c2d45920 "\005",
|
|
---Type <return> to continue, or q <return> to quit---
|
|
data_len=30, flags=9 '\t') at app-layer.c:129
|
|
#4 0x0000000000514b33 in StreamTcpReassembleAppLayer (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, ssn=0x7f33c277a000, stream=0x7f33c277a008, p=0x7f38a6d1cb10) at stream-tcp-reassemble.c:3027
|
|
#5 0x0000000000515370 in StreamTcpReassembleHandleSegmentUpdateACK (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, ssn=0x7f33c277a000, stream=0x7f33c277a008, p=0x7f38a6d1cb10)
|
|
at stream-tcp-reassemble.c:3373
|
|
#6 0x00000000005170a3 in StreamTcpReassembleHandleSegment (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, ssn=0x7f33c277a000, stream=0x7f33c277a050, p=0x7f38a6d1cb10, pq=<optimized out>)
|
|
at stream-tcp-reassemble.c:3401
|
|
#7 0x000000000050de9c in HandleEstablishedPacketToClient (pq=<optimized out>, p=<optimized out>, ssn=<optimized out>, tv=<optimized out>, stt=<optimized out>) at stream-tcp.c:2090
|
|
#8 StreamTcpPacketStateEstablished (tv=0xa37e8070, p=0x7f38a6d1cb10, stt=0x7f39ac0129c0, ssn=0x7f33c277a000, pq=0x7f39ac0129d0) at stream-tcp.c:2336
|
|
#9 0x0000000000511b6e in StreamTcpPacket (tv=0xa37e8070, p=0x7f38a6d1cb10, stt=0x7f39ac0129c0, pq=0xa37f3270) at stream-tcp.c:4242
|
|
#10 0x0000000000512dac in StreamTcp (tv=0xa37e8070, p=0x7f38a6d1cb10, data=0x7f39ac0129c0, pq=0xa37f3270, postpq=<optimized out>) at stream-tcp.c:4484
|
|
#11 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37e8070, p=0x7f38a6d1cb10, slot=<optimized out>) at tm-threads.c:559
|
|
#12 0x00000000005091b7 in TmThreadsSlotProcessPkt (p=0x7298270, s=<optimized out>, tv=0xa37e8070) at tm-threads.h:171
|
|
#13 ReceivePfringLoop (tv=0xa37e8070, data=0x7f39ac0008c0, slot=<optimized out>) at source-pfring.c:338
|
|
#14 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37e8070) at tm-threads.c:703
|
|
#15 0x00007f3a03f6be9a in start_thread (arg=0x7f39c2d48700) at pthread_create.c:308
|
|
#16 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
|
|
#17 0x0000000000000000 in ?? ()
|
|
(gdb)
|
|
(gdb) exit
|
|
Undefined command: "exit". Try "help".
|
|
(gdb) quit
|
|
root@suricata:~#
|