root@suricata:~/oisf# suricata --build-info This is Suricata version 2.0dev (rev 6fbb955) Features: PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 PF_RING AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LIBJANSSON SIMD support: SSE_4_2 SSE_4_1 SSE_3 Atomic intrisics: 1 2 4 8 16 byte(s) 64-bits, Little-endian architecture GCC version 4.6.3, C version 199901 compiled with -fstack-protector compiled with _FORTIFY_SOURCE=2 L1 cache line size (CLS)=64 compiled with LibHTP v0.5.11, linked against LibHTP v0.5.11 Suricata Configuration: AF_PACKET support: yes PF_RING support: yes NFQueue support: no IPFW support: no DAG enabled: no Napatech enabled: no Unix socket enabled: yes Detection enabled: yes libnss support: yes libnspr support: yes libjansson support: yes Prelude support: no PCRE jit: no libluajit: no libgeoip: no Non-bundled htp: no Old barnyard2 support: no CUDA enabled: no Suricatasc install: yes Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Profiling enabled: no Profiling locks enabled: no Coccinelle / spatch: yes Generic build parameters: Installation prefix (--prefix): /usr/local Configuration directory (--sysconfdir): /usr/local/etc/suricata/ Log directory (--localstatedir) : /usr/local/var/log/suricata/ Host: x86_64-unknown-linux-gnu GCC binary: gcc GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: no root@suricata:~/oisf# CORE DUMP [New LWP 2407] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `suricata --pfring-int=eth3 --pfring-cluster-id=99 --pfring-cluster-type=cluster'. Program terminated with signal 6, Aborted. #0 0x00007f4bb5642425 in __GI_raise (sig=) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) thread apply all bt Thread 21 (Thread 0x7f4adf7fe700 (LWP 2407)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61 #3 0x0000000000524749 in TmqhOutputPacketpool (t=, p=0xc322f90) at tmqh-packetpool.c:183 #4 0x0000000000510da7 in TmThreadsSlotProcessPkt (p=0xc322f90, s=0xa867a430, tv=0xf157d760) at tm-threads.h:156 #5 ReceivePfringLoop (tv=0xf157d760, data=0x7f4ac80008c0, slot=) at source-pfring.c:362 #6 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xf157d760) at tm-threads.c:703 #7 0x00007f4bb6379e9a in start_thread (arg=0x7f4adf7fe700) at pthread_create.c:308 #8 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #9 0x0000000000000000 in ?? () Thread 20 (Thread 0x7f4b37fff700 (LWP 2399)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f4b30014110, buf=0x9b09d76 "3\023촾c\273\221\352\351\304\017\247\254\220O", buflen=1440) at util-mpm-ac.c:1231 #1 0x000000000045d893 in DetectMpmPrefilter (sms_runflags=, has_state=, alproto=0, flags=4 '\004', p=0x9b09590, smsg=0x0, det_ctx=0x7f4b30014040, de_ctx=0xa1d8b040) at detect.c:983 #2 SigMatchSignatures (th_v=0xaf950d50, de_ctx=0xa1d8b040, det_ctx=0x7f4b30014040, p=0x9b09590) at detect.c:1319 #3 0x000000000045de15 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1730 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1702 #5 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xaf950d50, p=0x9b09590, slot=) at tm-threads.c:559 #6 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x9b09590, s=0x1032560b0, tv=0xaf950d50) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0xaf950d50, data=0x7f4b300008c0, slot=) at source-pfring.c:362 #8 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xaf950d50) at tm-threads.c:703 #9 0x00007f4bb6379e9a in start_thread (arg=0x7f4b37fff700) at pthread_create.c:308 #10 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 19 (Thread 0x7f4b74fb8700 (LWP 2398)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xd164670) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0xd164670) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0xfb40cb80, dtv=, p=0xd164670, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0xfb40cb80, dtv=0x7f4b4c011460, p=0xd164670, pkt=0x7f45ca4cc17e "E", len=, pq=0x10344c980) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0xfb40cb80, dtv=0x7f4b4c011460, p=0xd164670, pkt=0x7f45ca4cc170 "x\376=\273g\300d\207\210b\207\301\b", len=1466, pq=0x10344c980) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0x10344c980, data=0x7f4b4c011460, p=0xd164670, tv=0xfb40cb80, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0xfb40cb80, p=0xd164670, data=0x7f4b4c011460, pq=0x10344c980, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xfb40cb80, p=0xd164670, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xd164670, s=0x10344c940, tv=0xfb40cb80) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0xfb40cb80, data=0x7f4b4c0008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xfb40cb80) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b74fb8700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 ---Type to continue, or q to quit--- #16 0x0000000000000000 in ?? () Thread 18 (Thread 0x7f4b35ffb700 (LWP 2403)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xef87e00) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0xef87e00) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0x1014e27e0, dtv=, p=0xef87e00, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0x1014e27e0, dtv=0x7f4b0c011460, p=0xef87e00, pkt=0x7f45cd921bde "E", len=, pq=0xa2e2d470) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0x1014e27e0, dtv=0x7f4b0c011460, p=0xef87e00, pkt=0x7f45cd921bd0 "x\376=\273g\300d\207\210b\207\301\b", len=1494, pq=0xa2e2d470) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0xa2e2d470, data=0x7f4b0c011460, p=0xef87e00, tv=0x1014e27e0, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0x1014e27e0, p=0xef87e00, data=0x7f4b0c011460, pq=0xa2e2d470, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x1014e27e0, p=0xef87e00, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xef87e00, s=0xa2e2d430, tv=0x1014e27e0) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0x1014e27e0, data=0x7f4b0c0008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x1014e27e0) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b35ffb700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #16 0x0000000000000000 in ?? () Thread 17 (Thread 0x7f4ade7fc700 (LWP 2409)): #0 __lll_unlock_wake () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:368 #1 0x00007f4bb637d104 in _L_unlock_644 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637d063 in __pthread_mutex_unlock_usercnt (mutex=, decr=) at pthread_mutex_unlock.c:52 #3 __pthread_mutex_unlock (mutex=0x145834c0) at pthread_mutex_unlock.c:290 #4 0x00000000004e923e in JsonSshCondition (tv=, p=0x3826510) at output-json-ssh.c:306 #5 0x00000000004eb80a in OutputPacketLog (tv=0x100cb6a10, p=0x3826510, thread_data=, pq=, postpq=) at output-packet.c:100 #6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x100cb6a10, p=0x3826510, slot=) at tm-threads.c:559 #7 0x000000000052622f in TmThreadsSlotVarRun (tv=0x100cb6a10, p=0x6e65240, slot=) at tm-threads.c:585 #8 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x6e65240, s=0xacd88fe0, tv=0x100cb6a10) at tm-threads.h:142 #9 ReceivePfringLoop (tv=0x100cb6a10, data=0x7f4ab00008c0, slot=) at source-pfring.c:362 #10 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x100cb6a10) at tm-threads.c:703 #11 0x00007f4bb6379e9a in start_thread (arg=0x7f4ade7fc700) at pthread_create.c:308 #12 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #13 0x0000000000000000 in ?? () Thread 16 (Thread 0x7f4addffb700 (LWP 2410)): #0 0x00007f4bb56f9763 in select () at ../sysdeps/unix/syscall-template.S:82 #1 0x000000000052d910 in UnixMain (this=0x809fe0) at unix-manager.c:508 #2 0x000000000052e60a in UnixManagerThread (td=0xea148ce0) at unix-manager.c:867 #3 0x00007f4bb6379e9a in start_thread (arg=0x7f4addffb700) at pthread_create.c:308 #4 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #5 0x0000000000000000 in ?? () Thread 15 (Thread 0x7f4b75fba700 (LWP 2396)): ---Type to continue, or q to quit--- #0 0x0000000000442bef in SCPerfCounterIncr (id=, pca=0x7f4b643ad910) at counters.c:92 #1 0x000000000051edb2 in StreamTcpGetSegment (ra_ctx=0x7f4b64013580, tv=0x10340ba20, len=) at stream-tcp-reassemble.c:3800 #2 StreamTcpGetSegment (tv=0x10340ba20, ra_ctx=0x7f4b64013580, len=) at stream-tcp-reassemble.c:3778 #3 0x000000000051fd4c in StreamTcpReassembleHandleSegmentHandleData (tv=0x10340ba20, ra_ctx=0x7f4b64013580, ssn=, stream=0x7f45c0729398, p=0xf4a5990) at stream-tcp-reassemble.c:1873 #4 0x00000000005202cf in StreamTcpReassembleHandleSegment (tv=0x10340ba20, ra_ctx=0x7f4b64013580, ssn=0x7f45c0729390, stream=0x7f45c0729398, p=0xf4a5990, pq=) at stream-tcp-reassemble.c:3601 #5 0x0000000000518e63 in StreamTcpPacketStateTimeWait (tv=0x10340ba20, p=0xf4a5990, ssn=0x7f45c0729390, pq=0x7f4b64012ea0, stt=) at stream-tcp.c:4013 #6 0x000000000051993a in StreamTcpPacket (tv=0x10340ba20, p=0xf4a5990, stt=0x7f4b64012e90, pq=0xee9ab280) at stream-tcp.c:4295 #7 0x000000000051a9bc in StreamTcp (tv=0x10340ba20, p=0xf4a5990, data=0x7f4b64012e90, pq=0xee9ab280, postpq=) at stream-tcp.c:4507 #8 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x10340ba20, p=0xf4a5990, slot=) at tm-threads.c:559 #9 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xf4a5990, s=0x1061f0d70, tv=0x10340ba20) at tm-threads.h:142 #10 ReceivePfringLoop (tv=0x10340ba20, data=0x7f4b640008c0, slot=) at source-pfring.c:362 #11 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x10340ba20) at tm-threads.c:703 #12 0x00007f4bb6379e9a in start_thread (arg=0x7f4b75fba700) at pthread_create.c:308 #13 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #14 0x0000000000000000 in ?? () Thread 14 (Thread 0x7f4b367fc700 (LWP 2402)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xeeba900) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0xeeba900) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0x105912220, dtv=, p=0xeeba900, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0x105912220, dtv=0x7f4b08011460, p=0xeeba900, pkt=0x7f49df62b6be "E", len=, pq=0xfa5a4280) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0x105912220, dtv=0x7f4b08011460, p=0xeeba900, pkt=0x7f49df62b6b0 "x\376=\273g\300d\207\210b\207\301\b", len=1502, pq=0xfa5a4280) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0xfa5a4280, data=0x7f4b08011460, p=0xeeba900, tv=0x105912220, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0x105912220, p=0xeeba900, data=0x7f4b08011460, pq=0xfa5a4280, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x105912220, p=0xeeba900, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xeeba900, s=0xfa5a4240, tv=0x105912220) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0x105912220, data=0x7f4b080008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x105912220) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b367fc700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #16 0x0000000000000000 in ?? () Thread 13 (Thread 0x7f4adcff9700 (LWP 2412)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215 #1 0x0000000000440b82 in SCPerfWakeupThread (arg=0x10f4a2880) at counters.c:408 #2 0x00007f4bb6379e9a in start_thread (arg=0x7f4adcff9700) at pthread_create.c:308 #3 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #4 0x0000000000000000 in ?? () Thread 12 (Thread 0x7f4aa7fff700 (LWP 2413)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215 ---Type to continue, or q to quit--- #1 0x0000000000444532 in SCPerfMgmtThread (arg=0x10f4a2b20) at counters.c:340 #2 0x00007f4bb6379e9a in start_thread (arg=0x7f4aa7fff700) at pthread_create.c:308 #3 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #4 0x0000000000000000 in ?? () Thread 11 (Thread 0x7f4b377fe700 (LWP 2400)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61 #3 0x000000000045ca6f in SigMatchSignatures (th_v=0xfee94c20, de_ctx=0xa1d8b040, det_ctx=0x7f4b20014040, p=0x6082ab0) at detect.c:1606 #4 0x000000000045de15 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1730 #5 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1702 #6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xfee94c20, p=0x6082ab0, slot=) at tm-threads.c:559 #7 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x6082ab0, s=0xad6d18f0, tv=0xfee94c20) at tm-threads.h:142 #8 ReceivePfringLoop (tv=0xfee94c20, data=0x7f4b200008c0, slot=) at source-pfring.c:362 #9 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xfee94c20) at tm-threads.c:703 #10 0x00007f4bb6379e9a in start_thread (arg=0x7f4b377fe700) at pthread_create.c:308 #11 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #12 0x0000000000000000 in ?? () Thread 10 (Thread 0x7f4b76fbc700 (LWP 2394)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61 #3 0x000000000045ca6f in SigMatchSignatures (th_v=0xaf89df00, de_ctx=0xa1d8b040, det_ctx=0x7f4b700140a0, p=0x40212d0) at detect.c:1606 #4 0x000000000045de15 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1730 #5 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1702 #6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xaf89df00, p=0x40212d0, slot=) at tm-threads.c:559 #7 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x40212d0, s=0x104d6dfa0, tv=0xaf89df00) at tm-threads.h:142 #8 ReceivePfringLoop (tv=0xaf89df00, data=0x7f4b700008c0, slot=) at source-pfring.c:362 #9 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xaf89df00) at tm-threads.c:703 #10 0x00007f4bb6379e9a in start_thread (arg=0x7f4b76fbc700) at pthread_create.c:308 #11 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #12 0x0000000000000000 in ?? () Thread 9 (Thread 0x7f4b767bb700 (LWP 2395)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0x10683ca0) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0x10683ca0) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0x105ae7540, dtv=, p=0x10683ca0, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0x105ae7540, dtv=0x7f4b60011460, p=0x10683ca0, pkt=0x7f4969c9912e "E", len=, pq=0x101a064d0) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0x105ae7540, dtv=0x7f4b60011460, p=0x10683ca0, pkt=0x7f4969c99120 "x\376=\273g\300d\207\210b\207\301\b", len=1466, pq=0x101a064d0) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0x101a064d0, data=0x7f4b60011460, p=0x10683ca0, tv=0x105ae7540, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0x105ae7540, p=0x10683ca0, data=0x7f4b60011460, pq=0x101a064d0, postpq=) at source-pfring.c:602 ---Type to continue, or q to quit--- #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x105ae7540, p=0x10683ca0, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x10683ca0, s=0x101a06490, tv=0x105ae7540) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0x105ae7540, data=0x7f4b600008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x105ae7540) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b767bb700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #16 0x0000000000000000 in ?? () Thread 8 (Thread 0x7f4bb7452840 (LWP 2393)): #0 0x00007f4bb56cc08d in nanosleep () at ../sysdeps/unix/syscall-template.S:82 #1 0x00007f4bb56f9eb4 in usleep (useconds=) at ../sysdeps/unix/sysv/linux/usleep.c:33 #2 0x00000000004114f7 in main (argc=, argv=) at suricata.c:2307 Thread 7 (Thread 0x7f4b757b9700 (LWP 2397)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0x3758260) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0x3758260) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0x103297c90, dtv=, p=0x3758260, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0x103297c90, dtv=0x7f4b48011460, p=0x3758260, pkt=0x7f4824c5850e "E", len=, pq=0xfffc32e0) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0x103297c90, dtv=0x7f4b48011460, p=0x3758260, pkt=0x7f4824c58500 "x\376=\273g\300d\207\210b\207\301\b", len=1322, pq=0xfffc32e0) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0xfffc32e0, data=0x7f4b48011460, p=0x3758260, tv=0x103297c90, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0x103297c90, p=0x3758260, data=0x7f4b48011460, pq=0xfffc32e0, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x103297c90, p=0x3758260, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x3758260, s=0xfffc32a0, tv=0x103297c90) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0x103297c90, data=0x7f4b480008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x103297c90) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b757b9700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #16 0x0000000000000000 in ?? () Thread 6 (Thread 0x7f4add7fa700 (LWP 2411)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215 #1 0x00000000004cefe9 in FlowManagerThread (td=0x108fb87d0) at flow-manager.c:545 #2 0x00007f4bb6379e9a in start_thread (arg=0x7f4add7fa700) at pthread_create.c:308 #3 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #4 0x0000000000000000 in ?? () Thread 5 (Thread 0x7f4b34ff9700 (LWP 2405)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x145834c0) at pthread_mutex_lock.c:61 #3 0x00000000004ce3cf in FlowGetFlowFromHash (p=0x61f5f10) at flow-hash.c:590 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0x61f5f10) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0xb99f8400, dtv=, p=0x61f5f10, pkt=, len=, pq=) at decode-tcp.c:206 ---Type to continue, or q to quit--- #6 0x000000000044750e in DecodeIPV4 (tv=0xb99f8400, dtv=0x7f4af4011460, p=0x61f5f10, pkt=0x7f463c327fee "E", len=, pq=0xc3b07a10) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0xb99f8400, dtv=0x7f4af4011460, p=0x61f5f10, pkt=0x7f463c327fe0 "x\376=\273g\300d\207\210b\207\301\b", len=174, pq=0xc3b07a10) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0xc3b07a10, data=0x7f4af4011460, p=0x61f5f10, tv=0xb99f8400, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0xb99f8400, p=0x61f5f10, data=0x7f4af4011460, pq=0xc3b07a10, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xb99f8400, p=0x61f5f10, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x61f5f10, s=0xc3b079d0, tv=0xb99f8400) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0xb99f8400, data=0x7f4af40008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xb99f8400) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b34ff9700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #16 0x0000000000000000 in ?? () Thread 4 (Thread 0x7f4adeffd700 (LWP 2408)): #0 __lll_unlock_wake () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:368 #1 0x00007f4bb637d104 in _L_unlock_644 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637d063 in __pthread_mutex_unlock_usercnt (mutex=, decr=) at pthread_mutex_unlock.c:52 #3 __pthread_mutex_unlock (mutex=0x145834c0) at pthread_mutex_unlock.c:290 #4 0x00000000004e923e in JsonSshCondition (tv=, p=0xc3668e0) at output-json-ssh.c:306 #5 0x00000000004eb80a in OutputPacketLog (tv=0xbfee25d0, p=0xc3668e0, thread_data=, pq=, postpq=) at output-packet.c:100 #6 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xbfee25d0, p=0xc3668e0, slot=) at tm-threads.c:559 #7 0x000000000052622f in TmThreadsSlotVarRun (tv=0xbfee25d0, p=0x8160340, slot=) at tm-threads.c:585 #8 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x8160340, s=0xabe2a1a0, tv=0xbfee25d0) at tm-threads.h:142 #9 ReceivePfringLoop (tv=0xbfee25d0, data=0x7f4acc0008c0, slot=) at source-pfring.c:362 #10 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xbfee25d0) at tm-threads.c:703 #11 0x00007f4bb6379e9a in start_thread (arg=0x7f4adeffd700) at pthread_create.c:308 #12 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #13 0x0000000000000000 in ?? () Thread 3 (Thread 0x7f4b357fa700 (LWP 2404)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0xca806d0) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0xca806d0) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0xd2da6c60, dtv=, p=0xca806d0, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0xd2da6c60, dtv=0x7f4af0011460, p=0xca806d0, pkt=0x7f46bb7cbbae "E", len=, pq=0xa2e255e0) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0xd2da6c60, dtv=0x7f4af0011460, p=0xca806d0, pkt=0x7f46bb7cbba0 "x\376=\273g\300d\207\210b\207\301\b", len=1480, pq=0xa2e255e0) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0xa2e255e0, data=0x7f4af0011460, p=0xca806d0, tv=0xd2da6c60, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0xd2da6c60, p=0xca806d0, data=0x7f4af0011460, pq=0xa2e255e0, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0xd2da6c60, p=0xca806d0, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0xca806d0, s=0xa2e255a0, tv=0xd2da6c60) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0xd2da6c60, data=0x7f4af00008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0xd2da6c60) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4b357fa700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 ---Type to continue, or q to quit--- #16 0x0000000000000000 in ?? () Thread 2 (Thread 0x7f4adffff700 (LWP 2406)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:132 #1 0x00007f4bb637c065 in _L_lock_858 () from /lib/x86_64-linux-gnu/libpthread.so.0 #2 0x00007f4bb637beba in __pthread_mutex_lock (mutex=0x7f4b7cbfe460) at pthread_mutex_lock.c:61 #3 0x00000000004cde4d in FlowGetFlowFromHash (p=0x3e3f8c0) at flow-hash.c:499 #4 0x00000000004cc301 in FlowHandlePacket (tv=, p=0x3e3f8c0) at flow.c:242 #5 0x00000000004495ee in DecodeTCP (tv=0x103453c30, dtv=, p=0x3e3f8c0, pkt=, len=, pq=) at decode-tcp.c:206 #6 0x000000000044750e in DecodeIPV4 (tv=0x103453c30, dtv=0x7f4ad8011460, p=0x3e3f8c0, pkt=0x7f461571941e "E", len=, pq=0xa3524830) at decode-ipv4.c:557 #7 0x0000000000445db5 in DecodeEthernet (tv=0x103453c30, dtv=0x7f4ad8011460, p=0x3e3f8c0, pkt=0x7f4615719410 "x\376=\273g\300d\207\210b\207\301\b", len=1358, pq=0xa3524830) at decode-ethernet.c:60 #8 0x00000000005109e4 in DecodePfring (pq=0xa3524830, data=0x7f4ad8011460, p=0x3e3f8c0, tv=0x103453c30, postpq=) at source-pfring.c:630 #9 DecodePfring (tv=0x103453c30, p=0x3e3f8c0, data=0x7f4ad8011460, pq=0xa3524830, postpq=) at source-pfring.c:602 #10 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x103453c30, p=0x3e3f8c0, slot=) at tm-threads.c:559 #11 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x3e3f8c0, s=0xa35247f0, tv=0x103453c30) at tm-threads.h:142 #12 ReceivePfringLoop (tv=0x103453c30, data=0x7f4ad80008c0, slot=) at source-pfring.c:362 #13 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x103453c30) at tm-threads.c:703 #14 0x00007f4bb6379e9a in start_thread (arg=0x7f4adffff700) at pthread_create.c:308 #15 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #16 0x0000000000000000 in ?? () Thread 1 (Thread 0x7f4b36ffd700 (LWP 2401)): #0 0x00007f4bb5642425 in __GI_raise (sig=) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64 #1 0x00007f4bb5645b8b in __GI_abort () at abort.c:91 #2 0x00007f4bb563b0ee in __assert_fail_base (fmt=, assertion=0x58cd28 "!(1)", file=0x58d323 "app-layer-htp.c", line=, function=) at assert.c:94 #3 0x00007f4bb563b192 in __GI___assert_fail (assertion=0x58cd28 "!(1)", file=0x58d323 "app-layer-htp.c", line=787, function=0x58e600 "HTPHandleResponseData") at assert.c:103 #4 0x000000000042ddb0 in HTPHandleResponseData (f=, htp_state=, pstate=, input=, input_len=, local_data=) at app-layer-htp.c:787 #5 0x0000000000433862 in AppLayerParserParse (alp_tctx=, f=0x1e556d10, alproto=1, flags=11 '\v', input=, input_len=) at app-layer-parser.c:821 #6 0x000000000041c97a in AppLayerHandleTCPData (tv=0x10986f900, ra_ctx=0x7f4b24013580, p=0x5c152c0, f=0x1e556d10, ssn=0x7f45bd466ed0, stream=0x7f45bd466ed8, data=0x7f4b36ffa920 "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nExpires: Thu, 01 May 2014 13:32:05 GMT\r\nLocation: http://dmd.metaservices.microsoft.com/dms/metadata.svc\r\nServer: Mi"..., data_len=500, flags=11 '\v') at app-layer.c:288 #7 0x000000000051dc99 in StreamTcpReassembleAppLayer (tv=0x10986f900, ra_ctx=0x7f4b24013580, ssn=0x7f45bd466ed0, stream=0x7f45bd466ed8, p=0x5c152c0) at stream-tcp-reassemble.c:3215 #8 0x000000000051e590 in StreamTcpReassembleHandleSegmentUpdateACK (tv=0x10986f900, ra_ctx=0x7f4b24013580, ssn=0x7f45bd466ed0, stream=0x7f45bd466ed8, p=0x5c152c0) at stream-tcp-reassemble.c:3562 #9 0x000000000051fee3 in StreamTcpReassembleHandleSegment (tv=0x10986f900, ra_ctx=0x7f4b24013580, ssn=0x7f45bd466ed0, stream=0x7f45bd466f20, p=0x5c152c0, pq=) at stream-tcp-reassemble.c:3590 #10 0x0000000000515b12 in HandleEstablishedPacketToClient (pq=, p=, ssn=, tv=, stt=) at stream-tcp.c:2091 #11 StreamTcpPacketStateEstablished (tv=0x10986f900, p=0x5c152c0, stt=0x7f4b24012e90, ssn=0x7f45bd466ed0, pq=0x7f4b24012ea0) at stream-tcp.c:2337 #12 0x00000000005197ae in StreamTcpPacket (tv=0x10986f900, p=0x5c152c0, stt=0x7f4b24012e90, pq=0xa2e24820) at stream-tcp.c:4265 #13 0x000000000051a9bc in StreamTcp (tv=0x10986f900, p=0x5c152c0, data=0x7f4b24012e90, pq=0xa2e24820, postpq=) at stream-tcp.c:4507 #14 0x00000000005261f8 in TmThreadsSlotVarRun (tv=0x10986f900, p=0x5c152c0, slot=) at tm-threads.c:559 #15 0x0000000000510d94 in TmThreadsSlotProcessPkt (p=0x5c152c0, s=0x109ce07a0, tv=0x10986f900) at tm-threads.h:142 #16 ReceivePfringLoop (tv=0x10986f900, data=0x7f4b240008c0, slot=) at source-pfring.c:362 ---Type to continue, or q to quit--- #17 0x000000000052921e in TmThreadsSlotPktAcqLoop (td=0x10986f900) at tm-threads.c:703 #18 0x00007f4bb6379e9a in start_thread (arg=0x7f4b36ffd700) at pthread_create.c:308 #19 0x00007f4bb57003fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #20 0x0000000000000000 in ?? () (gdb) (gdb)