Thread 21 (Thread 0x7f989a5fe700 (LWP 24762)): #0 SCACSearch (mpm_ctx=0x28de540, mpm_thread_ctx=0x7f98883ff6a0, pmq=0x7f98883ff6d0, buf=0x7f9899bd00b2
, buflen=1370) at util-mpm-ac.c:1325 #1 0x00000000004b2b27 in PacketPatternSearch (det_ctx=0x7f98883ff5a0, p=0x7f9888373af0) at detect-engine-mpm.c:247 #2 0x0000000000476da9 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98883ff5a0, smsg=0x0, p=0x7f9888373af0, flags=4 '\004', alproto=0, has_state=0, sms_runflags=0x7f989a5fc902 "\003") at detect.c:1095 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x390bfb0, de_ctx=0x25532c0, det_ctx=0x7f98883ff5a0, p=0x7f9888373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x390bfb0, p=0x7f9888373af0, data=0x7f98883ff5a0, pq=0x4818790, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x390bfb0, p=0x7f9888373af0, slot=0x37e1c00) at tm-threads.c:132 #6 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x390bfb0, s=0x37e1c00, p=0x7f9888373af0) at tm-threads.h:149 #7 0x000000000058002e in ReceivePfringLoop (tv=0x390bfb0, data=0x7f98883748c0, slot=0x3876200) at source-pfring.c:361 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x390bfb0) at tm-threads.c:336 #9 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 20 (Thread 0x7f989b7ff700 (LWP 24761)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x38fb050, data=0x7f98903748c0, slot=0x3811b30) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x38fb050) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 19 (Thread 0x7f98ca5fe700 (LWP 24752)): #0 0x0000000000479c8f in PacketCreateMask (p=0x0, mask=0x0, alproto=0, has_state=73640512, smsg=0x7f98bc385390, app_decoder_events=32664) at detect.c:2380 #1 0x000000000047815e in SigMatchSignatures (th_v=0x463aa40, de_ctx=0x25532c0, det_ctx=0x7f98bc3ff5a0, p=0x7f98bc373af0) at detect.c:1450 #2 0x0000000000479577 in Detect (tv=0x463aa40, p=0x7f98bc373af0, data=0x7f98bc3ff5a0, pq=0x463e260, postpq=0x0) at detect.c:2031 #3 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x463aa40, p=0x7f98bc373af0, slot=0x4226b90) at tm-threads.c:132 #4 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x463aa40, s=0x4226b90, p=0x7f98bc373af0) at tm-threads.h:149 #5 0x000000000058002e in ReceivePfringLoop (tv=0x463aa40, data=0x7f98bc3748c0, slot=0x4479880) at source-pfring.c:361 #6 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x463aa40) at tm-threads.c:336 #7 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #8 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 18 (Thread 0x7f98badfe700 (LWP 24755)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x4732580, data=0x7f98ac3748c0, slot=0x45bce70) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x4732580) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 17 (Thread 0x7f98875fe700 (LWP 24765)): #0 0x00007f98dcf8698e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00000000005145f4 in FlowRecycler (th_v=0x3de0f60, thread_data=0x7f98780008c0) at flow-manager.c:844 #2 0x00000000005aa9e1 in TmThreadsManagement (td=0x3de0f60) at tm-threads.c:600 #3 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #4 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 16 (Thread 0x7f98d8bb7700 (LWP 24750)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x44846b0, data=0x7f98d03748c0, slot=0x45bedf0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x44846b0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 15 (Thread 0x7f98ab5fe700 (LWP 24758)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x48eac50, data=0x7f989c3748c0, slot=0x47eb5c0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x48eac50) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 14 (Thread 0x7f98abfff700 (LWP 24757)): #0 0x00007f98dc3a4bac in tolower () from /lib64/libc.so.6 #1 0x00000000005e9cab in SCACSearch (mpm_ctx=0x369e6d0, mpm_thread_ctx=0x7f98a43ff6a0, pmq=0x7f98a43ff6d0, buf=0x7f98b855abc6 , buflen=320) at util-mpm-ac.c:1324 #2 0x00000000004b29de in PacketPatternSearchWithStreamCtx (det_ctx=0x7f98a43ff5a0, p=0x7f98a4373af0) at detect-engine-mpm.c:196 #3 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98a43ff5a0, smsg=0x0, p=0x7f98a4373af0, flags=8 '\b', alproto=0, has_state=0, sms_runflags=0x7f98abffd902 "\003") at detect.c:1086 #4 0x00000000004781f3 in SigMatchSignatures (th_v=0x47ed2e0, de_ctx=0x25532c0, det_ctx=0x7f98a43ff5a0, p=0x7f98a4373af0) at detect.c:1462 #5 0x0000000000479577 in Detect (tv=0x47ed2e0, p=0x7f98a4373af0, data=0x7f98a43ff5a0, pq=0x486c8c0, postpq=0x0) at detect.c:2031 #6 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x47ed2e0, p=0x7f98a4373af0, slot=0x486db90) at tm-threads.c:132 #7 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x47ed2e0, s=0x486db90, p=0x7f98a4373af0) at tm-threads.h:149 #8 0x000000000058002e in ReceivePfringLoop (tv=0x47ed2e0, data=0x7f98a43748c0, slot=0x4772360) at source-pfring.c:361 #9 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x47ed2e0) at tm-threads.c:336 #10 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #11 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 13 (Thread 0x7f9887fff700 (LWP 24764)): #0 0x00007f98dcf84633 in pthread_mutex_trylock () from /lib64/libpthread.so.0 #1 0x0000000000512ffa in FlowTimeoutHash (ts=0x7f9887ffe3f0, try_cnt=0, hash_min=0, hash_max=65536, counters=0x7f9887ffe3d0) at flow-manager.c:388 #2 0x000000000051388f in FlowManager (th_v=0x3de0e50, thread_data=0x7f98800008c0) at flow-manager.c:620 #3 0x00000000005aa9e1 in TmThreadsManagement (td=0x3de0e50) at tm-threads.c:600 #4 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #5 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 12 (Thread 0x7f98861fc700 (LWP 24767)): #0 0x00007f98dcf8698e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f0c5 in StatsMgmtThread (arg=0x420b700) at counters.c:359 #2 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 11 (Thread 0x7f98bbfff700 (LWP 24754)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x4732470, data=0x7f98b43748c0, slot=0x4770de0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x4732470) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 10 (Thread 0x7f98aa3fd700 (LWP 24759)): #0 SCACSearch (mpm_ctx=0x369e6a0, mpm_thread_ctx=0x7f98a03ff6a0, pmq=0x7f98a03ff6d0, buf=0x7f98a93376d6 , buflen=510) at util-mpm-ac.c:1325 #1 0x00000000004b2957 in PacketPatternSearchWithStreamCtx (det_ctx=0x7f98a03ff5a0, p=0x7f98a0373af0) at detect-engine-mpm.c:190 #2 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98a03ff5a0, smsg=0x0, p=0x7f98a0373af0, flags=4 '\004', alproto=0, has_state=0, sms_runflags=0x7f98aa3fb902 "\003") at detect.c:1086 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x48ead60, de_ctx=0x25532c0, det_ctx=0x7f98a03ff5a0, p=0x7f98a0373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x48ead60, p=0x7f98a0373af0, data=0x7f98a03ff5a0, pq=0x4639890, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x48ead60, p=0x7f98a0373af0, slot=0x47c7d90) at tm-threads.c:132 #6 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x48ead60, s=0x47c7d90, p=0x7f98a0373af0) at tm-threads.h:149 #7 0x000000000058002e in ReceivePfringLoop (tv=0x48ead60, data=0x7f98a03748c0, slot=0x48e9040) at source-pfring.c:361 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x48ead60) at tm-threads.c:336 #9 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 9 (Thread 0x7f98993fd700 (LWP 24763)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x390c0c0, data=0x7f988c3748c0, slot=0x390e710) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x390c0c0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 8 (Thread 0x7f98d9db8700 (LWP 24749)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x3873030, data=0x7f98cc3748c0, slot=0x381bbe0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x3873030) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 7 (Thread 0x7f9886bfd700 (LWP 24766)): #0 0x00007f98dcf8698e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f5a9 in StatsWakeupThread (arg=0x420b5f0) at counters.c:435 #2 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 6 (Thread 0x7f98b9bfd700 (LWP 24756)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x47ed1d0, data=0x7f98b03748c0, slot=0x4732b50) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x47ed1d0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 5 (Thread 0x7f98de272900 (LWP 24747)): #0 0x00007f98dc425cdd in nanosleep () from /lib64/libc.so.6 #1 0x00007f98dc45ae54 in usleep () from /lib64/libc.so.6 #2 0x00000000005a411b in main (argc=4, argv=0x7ffff82a5358) at suricata.c:2446 Thread 4 (Thread 0x7f98cb7ff700 (LWP 24751)): #0 0x00000000004525f4 in PacketDecodeFinalize (tv=0x44847c0, dtv=0x7f98c4385390, p=0x44847c0) at decode.c:110 #1 0x0000000000581d5f in DecodePfring (tv=0x44847c0, p=0x7f98c4373af0, data=0x7f98c4385390, pq=0x377b8d0, postpq=0x0) at source-pfring.c:638 #2 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x44847c0, p=0x7f98c4373af0, slot=0x377b890) at tm-threads.c:132 #3 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x44847c0, s=0x377b890, p=0x7f98c4373af0) at tm-threads.h:149 #4 0x000000000058002e in ReceivePfringLoop (tv=0x44847c0, data=0x7f98c43748c0, slot=0x45bd710) at source-pfring.c:361 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x44847c0) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7f98dafba700 (LWP 24748)): #0 0x00007f98dc458343 in poll () from /lib64/libc.so.6 #1 0x00007f98dd808d43 in pfring_mod_poll () from /usr/local/lib/libpfring.so #2 0x00007f98dd808ecf in pfring_mod_recv () from /usr/local/lib/libpfring.so #3 0x00007f98dd8074aa in pfring_recv () from /usr/local/lib/libpfring.so #4 0x000000000057ffbc in ReceivePfringLoop (tv=0x3872f20, data=0x7f98d43748c0, slot=0x387afb0) at source-pfring.c:345 #5 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x3872f20) at tm-threads.c:336 #6 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #7 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 2 (Thread 0x7f98a91fc700 (LWP 24760)): #0 SCACSearch (mpm_ctx=0x369e6a0, mpm_thread_ctx=0x7f98943ff6a0, pmq=0x7f98943ff6d0, buf=0x7f989bc810f2 , buflen=1428) at util-mpm-ac.c:1325 #1 0x00000000004b2957 in PacketPatternSearchWithStreamCtx (det_ctx=0x7f98943ff5a0, p=0x7f9894373af0) at detect-engine-mpm.c:190 #2 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x25532c0, det_ctx=0x7f98943ff5a0, smsg=0x0, p=0x7f9894373af0, flags=4 '\004', alproto=0, has_state=0, sms_runflags=0x7f98a91fa902 "\003") at detect.c:1086 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x38faf40, de_ctx=0x25532c0, det_ctx=0x7f98943ff5a0, p=0x7f9894373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x38faf40, p=0x7f9894373af0, data=0x7f98943ff5a0, pq=0x446dee0, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x38faf40, p=0x7f9894373af0, slot=0x37865d0) at tm-threads.c:132 #6 0x000000000057f861 in TmThreadsSlotProcessPkt (tv=0x38faf40, s=0x37865d0, p=0x7f9894373af0) at tm-threads.h:149 #7 0x000000000058002e in ReceivePfringLoop (tv=0x38faf40, data=0x7f98943748c0, slot=0x48e8630) at source-pfring.c:361 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x38faf40) at tm-threads.c:336 #9 0x00007f98dcf829d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f98dc461b6d in clone () from /lib64/libc.so.6 Thread 1 (Thread 0x7f98c93fd700 (LWP 24753)): #0 0x00007f98db2494f0 in ?? () #1 0x0000000000000000 in ?? () Thread 6 (Thread 0x7f058ca81700 (LWP 32588)): #0 0x00007f059105198e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f5a9 in StatsWakeupThread (arg=0x6096070) at counters.c:435 #2 0x00007f059104d9d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f059052cb6d in clone () from /lib64/libc.so.6 Thread 5 (Thread 0x7f058de83700 (LWP 32586)): #0 0x0000000000512cda in FlowManagerHashRowTimeout (f=0x31f2a90, ts=0x7f058de823f0, emergency=1, counters=0x7f058de823d0) at flow-manager.c:280 #1 0x0000000000513029 in FlowTimeoutHash (ts=0x7f058de823f0, try_cnt=0, hash_min=0, hash_max=65536, counters=0x7f058de823d0) at flow-manager.c:397 #2 0x000000000051388f in FlowManager (th_v=0x51d6100, thread_data=0x7f05800008c0) at flow-manager.c:620 #3 0x00000000005aa9e1 in TmThreadsManagement (td=0x51d6100) at tm-threads.c:600 #4 0x00007f059104d9d1 in start_thread () from /lib64/libpthread.so.0 #5 0x00007f059052cb6d in clone () from /lib64/libc.so.6 Thread 4 (Thread 0x7f057ffff700 (LWP 32589)): #0 0x00007f059105198e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f0c5 in StatsMgmtThread (arg=0x6116a60) at counters.c:359 #2 0x00007f059104d9d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f059052cb6d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7f059233d900 (LWP 32584)): #0 0x00007f05904f0cdd in nanosleep () from /lib64/libc.so.6 #1 0x00007f0590525e54 in usleep () from /lib64/libc.so.6 #2 0x00000000005a411b in main (argc=3, argv=0x7fff8434e328) at suricata.c:2446 Thread 2 (Thread 0x7f058d482700 (LWP 32587)): #0 0x00007f059105198e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00000000005145f4 in FlowRecycler (th_v=0x6095f60, thread_data=0x7f05840008c0) at flow-manager.c:844 #2 0x00000000005aa9e1 in TmThreadsManagement (td=0x6095f60) at tm-threads.c:600 #3 0x00007f059104d9d1 in start_thread () from /lib64/libpthread.so.0 #4 0x00007f059052cb6d in clone () from /lib64/libc.so.6 Thread 1 (Thread 0x7f058f085700 (LWP 32585)): #0 0x00007f058f314434 in ?? () #1 0x0000000004e6e150 in ?? () #2 0x00007f058f3142c0 in ?? () #3 0x0000000000000001 in ?? () #4 0x0000000000000dac in ?? () #5 0x00007f058a0e55ff in ?? () #6 0x0000000000000dac in ?? () #7 0x00007f058e2fef19 in ?? () #8 0x00007f058e3d15c2 in ?? () #9 0x00007f058e3d15c1 in ?? () #10 0x00007f0589df7b38 in ?? () #11 0x00007f058e3d15c3 in ?? () #12 0x0000000000000002 in ?? () #13 0x0000000004e6e150 in ?? () #14 0x0000000000000000 in ?? () Thread 13 (Thread 0x7f707758c700 (LWP 97814)): #0 0x00007f70784b1434 in ?? () #1 0x0000000003ddb9c0 in ?? () #2 0x00007f70784b12c0 in ?? () #3 0x0000000000000001 in ?? () #4 0x0000000000000dac in ?? () #5 0x00007f7068374463 in ?? () #6 0x0000000000000dac in ?? () #7 0x00007f70683742f5 in ?? () #8 0x00007f70683742fa in ?? () #9 0x00007f70683742f9 in ?? () #10 0x00007f70616a92eb in ?? () #11 0x00007f70683742fb in ?? () #12 0x0000000000000002 in ?? () #13 0x0000000004a51150 in ?? () #14 0x0000000000000000 in ?? () Thread 12 (Thread 0x7f7047fff700 (LWP 97823)): #0 0x00007f707a1ee98e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f5a9 in StatsWakeupThread (arg=0x5ea4600) at counters.c:435 #2 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 11 (Thread 0x7f70475fe700 (LWP 97824)): #0 0x00007f707a1ee98e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000000044f0c5 in StatsMgmtThread (arg=0x5ea4710) at counters.c:359 #2 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #3 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 10 (Thread 0x7f705d2d1700 (LWP 97822)): #0 0x00007f707a1ee98e in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00000000005145f4 in FlowRecycler (th_v=0x5cf8700, thread_data=0x7f704c0008c0) at flow-manager.c:844 #2 0x00000000005aa9e1 in TmThreadsManagement (td=0x5cf8700) at tm-threads.c:600 #3 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #4 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 9 (Thread 0x7f707b4da900 (LWP 97812)): #0 0x00007f707968dcdd in nanosleep () from /lib64/libc.so.6 #1 0x00007f70796c2e54 in usleep () from /lib64/libc.so.6 #2 0x00000000005a411b in main (argc=4, argv=0x7fff306fcbf8) at suricata.c:2446 Thread 8 (Thread 0x7f7075c60700 (LWP 97816)): #0 0x00007f707960cb97 in tolower () from /lib64/libc.so.6 #1 0x00000000005e9cab in SCACSearch (mpm_ctx=0x4d857d0, mpm_thread_ctx=0x7f70603f2020, pmq=0x7f70603f2050, buf=0x7f70603742ea ">o\355\250@\320@\312=.h,\306纙i\316\215l@PQ\312\335m8,", buflen=1064) at util-mpm-ac.c:1324 #2 0x00000000004b2b27 in PacketPatternSearch (det_ctx=0x7f70603f1f20, p=0x7f7060373af0) at detect-engine-mpm.c:247 #3 0x0000000000476da9 in DetectMpmPrefilter (de_ctx=0x3c0e270, det_ctx=0x7f70603f1f20, smsg=0x0, p=0x7f7060373af0, flags=8 '\b', alproto=0, has_state=0, sms_runflags=0x7f7075c5e8e2 "\003") at detect.c:1095 #4 0x00000000004781f3 in SigMatchSignatures (th_v=0x5cf9b70, de_ctx=0x3c0e270, det_ctx=0x7f70603f1f20, p=0x7f7060373af0) at detect.c:1462 #5 0x0000000000479577 in Detect (tv=0x5cf9b70, p=0x7f7060373af0, data=0x7f70603f1f20, pq=0x5d75da0, postpq=0x0) at detect.c:2031 #6 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x5cf9b70, p=0x7f7060373af0, slot=0x4fc6b40) at tm-threads.c:132 #7 0x000000000057aea1 in TmThreadsSlotProcessPkt (tv=0x5cf9b70, s=0x4fc6b40, p=0x7f7060373af0) at tm-threads.h:149 #8 0x000000000057b767 in PcapCallbackLoop (user=0x7f70603748c0 "@I7`p\177", h=0x7f7075c5eb60, pkt=0x7f7075090046 ) at source-pcap.c:276 #9 0x00007f707a82dace in ?? () from /usr/lib64/libpcap.so.1 #10 0x000000000057b85e in ReceivePcapLoop (tv=0x5cf9b70, data=0x7f70603748c0, slot=0x5d74a50) at source-pcap.c:316 #11 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x5cf9b70) at tm-threads.c:336 #12 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #13 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 7 (Thread 0x7f705f5fe700 (LWP 97819)): #0 SCACSearch (mpm_ctx=0x4d59650, mpm_thread_ctx=0x7f70503f2020, pmq=0x7f70503f2050, buf=0x7f70503742ea ">o͡@Р\312=(h,\312\347ޙn\016\210\f@Pq\313}m8, \344˰\347\207Q\344\035\313X\277-m(L@\344\312\330LQ\325\023\315\377\257<ÚU41&31\200\277א\021=w\037Yx\340eҼ%\202\354;\271n]\232\301\272Q6\301,\241\063\026\256\370\071\315\064\003\302\373\353k\322\066g\242\363J\340ْ\017a3\037h\307(\240:W\250\336\317\314I\216\252\222)c\245\374\017r3[(\363Q-^\\C\224\232\017'\306JV\345\311/\312h\331V\301 \322\326\026}O\275\017\270\226\f\022\271/\362(\255\221N\026\365\227\020\357\177\320t\020\233S\340\314\020b\366K\363G"..., buflen=1064) at util-mpm-ac.c:1325 #1 0x00000000004b29de in PacketPatternSearchWithStreamCtx (det_ctx=0x7f70503f1f20, p=0x7f7050373af0) at detect-engine-mpm.c:196 #2 0x0000000000476d77 in DetectMpmPrefilter (de_ctx=0x3c0e270, det_ctx=0x7f70503f1f20, smsg=0x0, p=0x7f7050373af0, flags=8 '\b', alproto=0, has_state=0, sms_runflags=0x7f705f5fc8e2 "\003") at detect.c:1086 #3 0x00000000004781f3 in SigMatchSignatures (th_v=0x5df1e60, de_ctx=0x3c0e270, det_ctx=0x7f70503f1f20, p=0x7f7050373af0) at detect.c:1462 #4 0x0000000000479577 in Detect (tv=0x5df1e60, p=0x7f7050373af0, data=0x7f70503f1f20, pq=0x4e33910, postpq=0x0) at detect.c:2031 #5 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x5df1e60, p=0x7f7050373af0, slot=0x5cf92c0) at tm-threads.c:132 #6 0x000000000057aea1 in TmThreadsSlotProcessPkt (tv=0x5df1e60, s=0x5cf92c0, p=0x7f7050373af0) at tm-threads.h:149 #7 0x000000000057b767 in PcapCallbackLoop (user=0x7f70503748c0 "@I7Pp\177", h=0x7f705f5fcb60, pkt=0x7f705ea6f676 ) at source-pcap.c:276 #8 0x00007f707a82dace in ?? () from /usr/lib64/libpcap.so.1 #9 0x000000000057b85e in ReceivePcapLoop (tv=0x5df1e60, data=0x7f70503748c0, slot=0x5d98630) at source-pcap.c:316 #10 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x5df1e60) at tm-threads.c:336 #11 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #12 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 6 (Thread 0x7f705dcd2700 (LWP 97821)): #0 0x0000000000512cda in FlowManagerHashRowTimeout (f=0x7f705483a620, ts=0x7f705dcd13f0, emergency=1, counters=0x7f705dcd13d0) at flow-manager.c:280 #1 0x0000000000513029 in FlowTimeoutHash (ts=0x7f705dcd13f0, try_cnt=0, hash_min=0, hash_max=65536, counters=0x7f705dcd13d0) at flow-manager.c:397 #2 0x000000000051388f in FlowManager (th_v=0x5cf85f0, thread_data=0x7f70480008c0) at flow-manager.c:620 #3 0x00000000005aa9e1 in TmThreadsManagement (td=0x5cf85f0) at tm-threads.c:600 #4 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #5 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 5 (Thread 0x7f705e968700 (LWP 97820)): #0 0x00007f707966aa5b in memcpy () from /lib64/libc.so.6 #1 0x0000000000452caa in PacketCopyDataOffset (p=0x7f7054373af0, offset=0, data=0x7f705de7c046 , datalen=66) at decode.c:215 #2 0x0000000000452fe0 in PacketCopyData (p=0x7f7054373af0, pktdata=0x7f705de7c046 , pktlen=66) at decode.c:244 #3 0x000000000057b679 in PcapCallbackLoop (user=0x7f70543748c0 "@I7Tp\177", h=0x7f705e966b60, pkt=0x7f705de7c046 ) at source-pcap.c:253 #4 0x00007f707a82dace in ?? () from /usr/lib64/libpcap.so.1 #5 0x000000000057b85e in ReceivePcapLoop (tv=0x5df1f70, data=0x7f70543748c0, slot=0x5cf4b60) at source-pcap.c:316 #6 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x5df1f70) at tm-threads.c:336 #7 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #8 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 4 (Thread 0x7f705ffff700 (LWP 97818)): #0 TCPCalculateChecksum (shdr=0x7f70583742da, pkt=0x7f7058374302, tlen=0) at decode-tcp.h:209 #1 0x0000000000590e75 in StreamTcpValidateChecksum (p=0x7f7058373af0) at stream-tcp.c:4705 #2 0x0000000000591664 in StreamTcp (tv=0x5b1dfb0, p=0x7f7058373af0, data=0x7f7058379040, pq=0x4f9bac0, postpq=0x0) at stream-tcp.c:5037 #3 0x00000000005a959b in TmThreadsSlotVarRun (tv=0x5b1dfb0, p=0x7f7058373af0, slot=0x4f38e70) at tm-threads.c:132 #4 0x000000000057aea1 in TmThreadsSlotProcessPkt (tv=0x5b1dfb0, s=0x4f38e70, p=0x7f7058373af0) at tm-threads.h:149 #5 0x000000000057b767 in PcapCallbackLoop (user=0x7f70583748c0 "@I7Xp\177", h=0x7f705fffdb60, pkt=0x7f70742a9046 ) at source-pcap.c:276 #6 0x00007f707a82dace in ?? () from /usr/lib64/libpcap.so.1 #7 0x000000000057b85e in ReceivePcapLoop (tv=0x5b1dfb0, data=0x7f70583748c0, slot=0x4e55110) at source-pcap.c:316 #8 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x5b1dfb0) at tm-threads.c:336 #9 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #10 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7f7078222700 (LWP 97813)): #0 0x00000000005a77c3 in PacketPoolReturnPacket (p=0x7f7070373af0) at tmqh-packetpool.c:290 #1 0x00000000005a8040 in TmqhOutputPacketpool (t=0x5bc2080, p=0x7f7070373af0) at tmqh-packetpool.c:542 #2 0x000000000057af48 in TmThreadsSlotProcessPkt (tv=0x5bc2080, s=0x4fb4b10, p=0x7f7070373af0) at tm-threads.h:163 #3 0x000000000057b767 in PcapCallbackLoop (user=0x7f70703748c0 "@I7pp\177", h=0x7f7078220b60, pkt=0x7f707762e676 ) at source-pcap.c:276 #4 0x00007f707a82dace in ?? () from /usr/lib64/libpcap.so.1 #5 0x000000000057b85e in ReceivePcapLoop (tv=0x5bc2080, data=0x7f70703748c0, slot=0x4db8ff0) at source-pcap.c:316 #6 0x00000000005a9e11 in TmThreadsSlotPktAcqLoop (td=0x5bc2080) at tm-threads.c:336 #7 0x00007f707a1ea9d1 in start_thread () from /lib64/libpthread.so.0 #8 0x00007f70796c9b6d in clone () from /lib64/libc.so.6 Thread 2 (Thread 0x7f7074fca700 (LWP 97817)): #0 0x00000000005e9c8b in SCACSearch (mpm_ctx=0x4d59350, mpm_thread_ctx=0x7f70643f2020, pmq=0x7f70643f2050, buf=0x7f70643742ea "^j\355\256@\321\020\312=)h,\300縘t\256\211,@P\301\312=m8,\240\345\313\312\321[}\263\f\306#\371-m(L@\344\312\330݈\b\240A\350\177\324C\244I\033\206k\366\262\331$\327\003\061_\320\316ϥ\311\374\205\002\260q\002X<\276ߚ\034\\\202ҍ\037\307Y\025\235WO\375V\363f\003MAՇ\035\363\231\255V\343\t\352\002V\005\330oX)HآQ\320A\017[!\370戌Odחa:\016\323\315.\232\002\027\030\025\271\315\062\204&X",