Thread 21 (Thread 0x7f989a5fe700 (LWP 24762)): #0 SCACSearch (mpm_ctx=0x28de540, mpm_thread_ctx=0x7f98883ff6a0, pmq=0x7f98883ff6d0, buf=0x7f9899bd00b2
, buflen=1370) at util-mpm-ac.c:1325 #1 0x00000000004b2b27 in PacketPatternSearch (det_ctx=0x7f98883ff5a0, p=0x7f9888373af0) at detect-engine-mpm.c:247 #2 0x0000000000476da9 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98883ff5a0, smsg=0x0, p=0x7f9888373af0, flags=4 '\004', alproto=0, has_state=0, sms_runflags=0x7f989a5fc902 "\003") at detect.c:1095 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x390bfb0, de_ctx=0x25532c0, det_ctx=0x7f98883ff5a0, p=0x7f9888373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x390bfb0, p=0x7f9888373af0, data=0x7f98883ff5a0, pq=0x4818790, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x390bfb0, p=0x7f9888373af0, slot=0x37e1c00) at tm-threads.c:132 #6 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x390bfb0, s=0x37e1c00, p=0x7f9888373af0) at tm-threads.h:149 #7 0x000000000058002e in ReceivePfringLoop (tv=0x390bfb0, data=0x7f98883748c0, slot=0x3876200) at source-pfring.c:361 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x390bfb0) at tm-threads.c:336 #9 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 20 (Thread 0x7f989b7ff700 (LWP 24761)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x38fb050, data=0x7f98903748c0, slot=0x3811b30) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x38fb050) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 19 (Thread 0x7f98ca5fe700 (LWP 24752)): #0 0x0000000000479c8f in PacketCreateMask (p=0x0, mask=0x0, alproto=0, has_state=73640512, smsg=0x7f98bc385390, app_decoder_events=32664) at detect.c:2380 #1 0x000000000047815e in SigMatchSignatures (th_v=0x463aa40, de_ctx=0x25532c0, det_ctx=0x7f98bc3ff5a0, p=0x7f98bc373af0) at detect.c:1450 #2 0x0000000000479577 in Detect (tv=0x463aa40, p=0x7f98bc373af0, data=0x7f98bc3ff5a0, pq=0x463e260, postpq=0x0) at detect.c:2031 #3 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x463aa40, p=0x7f98bc373af0, slot=0x4226b90) at tm-threads.c:132 #4 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x463aa40, s=0x4226b90, p=0x7f98bc373af0) at tm-threads.h:149 #5 0x000000000058002e in ReceivePfringLoop (tv=0x463aa40, data=0x7f98bc3748c0, slot=0x4479880) at source-pfring.c:361 #6 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x463aa40) at tm-threads.c:336 #7 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #8 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 18 (Thread 0x7f98badfe700 (LWP 24755)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x4732580, data=0x7f98ac3748c0, slot=0x45bce70) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x4732580) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 17 (Thread 0x7f98875fe700 (LWP 24765)): #0 0x00007f98dcf8698e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00000000005145f4 in FlowRecycler (th_v=0x3de0f60, thread_data=0x7f98780008c0) at flow-manager.c:844 #2 0x00000000005aa9e1 in TmThreadsManagement (td=0x3de0f60) at tm-threads.c:600 #3 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #4 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 16 (Thread 0x7f98d8bb7700 (LWP 24750)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x44846b0, data=0x7f98d03748c0, slot=0x45bedf0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x44846b0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 15 (Thread 0x7f98ab5fe700 (LWP 24758)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x48eac50, data=0x7f989c3748c0, slot=0x47eb5c0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x48eac50) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 14 (Thread 0x7f98abfff700 (LWP 24757)): #0 0x00007f98dc3a4bac in tolower () from /lib64/libc.so.6 #1 0x00000000005e9cab in SCACSearch (mpm_ctx=0x369e6d0, mpm_thread_ctx=0x7f98a43ff6a0, pmq=0x7f98a43ff6d0, buf=0x7f98b855abc6
, buflen=320) at util-mpm-ac.c:1324 #2 0x00000000004b29de in PacketPatternSearchWithStreamCtx (det_ctx=0x7f98a43ff5a0, p=0x7f98a4373af0) at detect-engine-mpm.c:196 #3 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98a43ff5a0, smsg=0x0, p=0x7f98a4373af0, flags=8 '\b', alproto=0, has_state=0, sms_runflags=0x7f98abffd902 "\003") at detect.c:1086 #4 0x00000000004781f3 in SigMatchSignatures (th_v=0x47ed2e0, de_ctx=0x25532c0, det_ctx=0x7f98a43ff5a0, p=0x7f98a4373af0) at detect.c:1462 #5 0x0000000000479577 in Detect (tv=0x47ed2e0, p=0x7f98a4373af0, data=0x7f98a43ff5a0, pq=0x486c8c0, postpq=0x0) at detect.c:2031 #6 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x47ed2e0, p=0x7f98a4373af0, slot=0x486db90) at tm-threads.c:132 #7 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x47ed2e0, s=0x486db90, p=0x7f98a4373af0) at tm-threads.h:149 #8 0x000000000058002e in ReceivePfringLoop (tv=0x47ed2e0, data=0x7f98a43748c0, slot=0x4772360) at source-pfring.c:361 #9 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x47ed2e0) at tm-threads.c:336 #10 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #11 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 13 (Thread 0x7f9887fff700 (LWP 24764)): #0 0x00007f98dcf84633 in pthread_mutex_trylock () from /lib64/libpthread.so.0 #1 0x0000000000512ffa in FlowTimeoutHash (ts=0x7f9887ffe3f0, try_cnt=0, hash_min=0, hash_max=65536, counters=0x7f9887ffe3d0) at flow-manager.c:388 #2 0x000000000051388f in FlowManager (th_v=0x3de0e50, thread_data=0x7f98800008c0) at flow-manager.c:620 #3 0x00000000005aa9e1 in TmThreadsManagement (td=0x3de0e50) at tm-threads.c:600 #4 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #5 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 12 (Thread 0x7f98861fc700 (LWP 24767)): #0 0x00007f98dcf8698e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f0c5 in StatsMgmtThread (arg=0x420b700) at counters.c:359 #2 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 11 (Thread 0x7f98bbfff700 (LWP 24754)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x4732470, data=0x7f98b43748c0, slot=0x4770de0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x4732470) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 10 (Thread 0x7f98aa3fd700 (LWP 24759)): #0 SCACSearch (mpm_ctx=0x369e6a0, mpm_thread_ctx=0x7f98a03ff6a0, pmq=0x7f98a03ff6d0, buf=0x7f98a93376d6
, buflen=510) at util-mpm-ac.c:1325 #1 0x00000000004b2957 in PacketPatternSearchWithStreamCtx (det_ctx=0x7f98a03ff5a0, p=0x7f98a0373af0) at detect-engine-mpm.c:190 #2 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98a03ff5a0, smsg=0x0, p=0x7f98a0373af0, flags=4 '\004', alproto=0, has_state=0, sms_runflags=0x7f98aa3fb902 "\003") at detect.c:1086 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x48ead60, de_ctx=0x25532c0, det_ctx=0x7f98a03ff5a0, p=0x7f98a0373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x48ead60, p=0x7f98a0373af0, data=0x7f98a03ff5a0, pq=0x4639890, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x48ead60, p=0x7f98a0373af0, slot=0x47c7d90) at tm-threads.c:132 #6 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x48ead60, s=0x47c7d90, p=0x7f98a0373af0) at tm-threads.h:149 #7 0x000000000058002e in ReceivePfringLoop (tv=0x48ead60, data=0x7f98a03748c0, slot=0x48e9040) at source-pfring.c:361 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x48ead60) at tm-threads.c:336 #9 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 9 (Thread 0x7f98993fd700 (LWP 24763)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x390c0c0, data=0x7f988c3748c0, slot=0x390e710) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x390c0c0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 8 (Thread 0x7f98d9db8700 (LWP 24749)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x3873030, data=0x7f98cc3748c0, slot=0x381bbe0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x3873030) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 7 (Thread 0x7f9886bfd700 (LWP 24766)): #0 0x00007f98dcf8698e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f5a9 in StatsWakeupThread (arg=0x420b5f0) at counters.c:435 #2 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 6 (Thread 0x7f98b9bfd700 (LWP 24756)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x47ed1d0, data=0x7f98b03748c0, slot=0x4732b50) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x47ed1d0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 5 (Thread 0x7f98de272900 (LWP 24747)): #0 0x00007f98dc425cdd in nanosleep () from /lib64/libc.so.6 #1 0x00007f98dc45ae54 in usleep () from /lib64/libc.so.6 #2 0x00000000005a411b in main (argc=4, argv=0x7ffff82a5358) at suricata.c:2446 Thread 4 (Thread 0x7f98cb7ff700 (LWP 24751)): #0 0x00000000004525f4 in PacketDecodeFinalize (tv=0x44847c0, dtv=0x7f98c4385390, p=0x44847c0) at decode.c:110 #1 0x0000000000581d5f in DecodePfring (tv=0x44847c0, p=0x7f98c4373af0, data=0x7f98c4385390, pq=0x377b8d0, postpq=0x0) at source-pfring.c:638 #2 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x44847c0, p=0x7f98c4373af0, slot=0x377b890) at tm-threads.c:132 #3 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x44847c0, s=0x377b890, p=0x7f98c4373af0) at tm-threads.h:149 #4 0x000000000058002e in ReceivePfringLoop (tv=0x44847c0, data=0x7f98c43748c0, slot=0x45bd710) at source-pfring.c:361 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x44847c0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7f98dafba700 (LWP 24748)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x3872f20, data=0x7f98d43748c0, slot=0x387afb0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x3872f20) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 2 (Thread 0x7f98a91fc700 (LWP 24760)): #0 SCACSearch (mpm_ctx=0x369e6a0, mpm_thread_ctx=0x7f98943ff6a0, pmq=0x7f98943ff6d0, buf=0x7f989bc810f2
, buflen=1428) at util-mpm-ac.c:1325 #1 0x00000000004b2957 in PacketPatternSearchWithStreamCtx (det_ctx=0x7f98943ff5a0, p=0x7f9894373af0) at detect-engine-mpm.c:190 #2 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98943ff5a0, smsg=0x0, p=0x7f9894373af0, flags=4 '\004', alproto=0, has_state=0, sms_runflags=0x7f98a91fa902 "\003") at detect.c:1086 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x38faf40, de_ctx=0x25532c0, det_ctx=0x7f98943ff5a0, p=0x7f9894373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x38faf40, p=0x7f9894373af0, data=0x7f98943ff5a0, pq=0x446dee0, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x38faf40, p=0x7f9894373af0, slot=0x37865d0) at tm-threads.c:132 #6 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x38faf40, s=0x37865d0, p=0x7f9894373af0) at tm-threads.h:149 #7 0x000000000058002e in ReceivePfringLoop (tv=0x38faf40, data=0x7f98943748c0, slot=0x48e8630) at source-pfring.c:361 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x38faf40) at tm-threads.c:336 #9 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 1 (Thread 0x7f98c93fd700 (LWP 24753)): #0 0x00007f98db2494f0 in ?? () #1 0x0000000000000000 in ?? ()