[root@p3pltestids003 /]# gdb -p 1 GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-80.el7 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: . Attaching to process 1 Reading symbols from /usr/bin/suricata...done. Reading symbols from /lib64/libjemalloc.so...Reading symbols from /usr/lib/debug/usr/lib64/libjemalloc.so.1.debug...done. done. Loaded symbols for /lib64/libjemalloc.so Reading symbols from /usr/lib/libhtp-0.5.18.so.1...done. Loaded symbols for /usr/lib/libhtp-0.5.18.so.1 Reading symbols from /lib64/libhiredis.so.0.12...Reading symbols from /usr/lib/debug/usr/lib64/libhiredis.so.0.12.debug...done. done. Loaded symbols for /lib64/libhiredis.so.0.12 Reading symbols from /lib64/libGeoIP.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libGeoIP.so.1.5.0.debug...done. done. Loaded symbols for /lib64/libGeoIP.so.1 Reading symbols from /lib64/libluajit-5.1.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libluajit-5.1.so.2.0.4.debug...done. done. Loaded symbols for /lib64/libluajit-5.1.so.2 Reading symbols from /lib64/libmagic.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libmagic.so.1.0.0.debug...done. done. Loaded symbols for /lib64/libmagic.so.1 Reading symbols from /lib64/libcap-ng.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libcap-ng.so.0.0.0.debug...done. done. Loaded symbols for /lib64/libcap-ng.so.0 Reading symbols from /lib64/libpcap.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libpcap.so.1.5.3.debug...done. done. Loaded symbols for /lib64/libpcap.so.1 Reading symbols from /lib64/libnet.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libnet.so.1.7.0.debug...done. done. Loaded symbols for /lib64/libnet.so.1 Reading symbols from /lib64/libnetfilter_queue.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libnetfilter_queue.so.1.3.0.debug...done. done. Loaded symbols for /lib64/libnetfilter_queue.so.1 Reading symbols from /lib64/libnfnetlink.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libnfnetlink.so.0.2.0.debug...done. done. Loaded symbols for /lib64/libnfnetlink.so.0 Reading symbols from /lib64/libjansson.so.4...Reading symbols from /usr/lib/debug/usr/lib64/libjansson.so.4.4.0.debug...done. done. Loaded symbols for /lib64/libjansson.so.4 Reading symbols from /lib64/libyaml-0.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libyaml-0.so.2.0.4.debug...done. done. Loaded symbols for /lib64/libyaml-0.so.2 Reading symbols from /lib64/libpcre.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libpcre.so.1.2.0.debug...done. done. Loaded symbols for /lib64/libpcre.so.1 Reading symbols from /lib64/libssl3.so...Reading symbols from /usr/lib/debug/usr/lib64/libssl3.so.debug...done. done. Loaded symbols for /lib64/libssl3.so Reading symbols from /lib64/libsmime3.so...Reading symbols from /usr/lib/debug/usr/lib64/libsmime3.so.debug...done. done. Loaded symbols for /lib64/libsmime3.so Reading symbols from /lib64/libnss3.so...Reading symbols from /usr/lib/debug/usr/lib64/libnss3.so.debug...done. done. Loaded symbols for /lib64/libnss3.so Reading symbols from /lib64/libnssutil3.so...Reading symbols from /usr/lib/debug/usr/lib64/libnssutil3.so.debug...done. done. Loaded symbols for /lib64/libnssutil3.so Reading symbols from /lib64/libplds4.so...Reading symbols from /usr/lib/debug/usr/lib64/libplds4.so.debug...done. done. Loaded symbols for /lib64/libplds4.so Reading symbols from /lib64/libplc4.so...Reading symbols from /usr/lib/debug/usr/lib64/libplc4.so.debug...done. done. Loaded symbols for /lib64/libplc4.so Reading symbols from /lib64/libnspr4.so...Reading symbols from /usr/lib/debug/usr/lib64/libnspr4.so.debug...done. done. Loaded symbols for /lib64/libnspr4.so Reading symbols from /lib64/libpthread.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libpthread-2.17.so.debug...done. done. [New LWP 211] [New LWP 210] [New LWP 209] [New LWP 208] [New LWP 207] [New LWP 206] [New LWP 205] [New LWP 204] [New LWP 203] [New LWP 202] [New LWP 201] [New LWP 200] [New LWP 199] [New LWP 198] [New LWP 197] [New LWP 196] [New LWP 195] [New LWP 194] [New LWP 193] [New LWP 192] [New LWP 191] [New LWP 190] [New LWP 189] [New LWP 188] [New LWP 187] [New LWP 186] [New LWP 185] [New LWP 184] [New LWP 183] [New LWP 182] [New LWP 181] [New LWP 180] [New LWP 179] [New LWP 178] [New LWP 177] [New LWP 176] [New LWP 175] [New LWP 174] [New LWP 173] [New LWP 172] [New LWP 171] [New LWP 170] [New LWP 169] [New LWP 168] [New LWP 167] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libdl.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libdl-2.17.so.debug...done. done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libc.so.6...Reading symbols from /usr/lib/debug/usr/lib64/libc-2.17.so.debug...done. done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...Reading symbols from /usr/lib/debug/usr/lib64/ld-2.17.so.debug...done. done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libz.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libz.so.1.2.7.debug...done. done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libm.so.6...Reading symbols from /usr/lib/debug/usr/lib64/libm-2.17.so.debug...done. done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libgcc_s.so.1...Reading symbols from /usr/lib/debug/usr/lib64/libgcc_s-4.8.5-20150702.so.1.debug...done. done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /lib64/libmnl.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libmnl.so.0.1.0.debug...done. done. Loaded symbols for /lib64/libmnl.so.0 Reading symbols from /lib64/librt.so.1...Reading symbols from /usr/lib/debug/usr/lib64/librt-2.17.so.debug...done. done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libnss_files.so.2...Reading symbols from /usr/lib/debug/usr/lib64/libnss_files-2.17.so.debug...done. done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libsoftokn3.so...Reading symbols from /usr/lib/debug/usr/lib64/libsoftokn3.so.debug...done. done. Loaded symbols for /lib64/libsoftokn3.so Reading symbols from /lib64/libsqlite3.so.0...Reading symbols from /usr/lib/debug/usr/lib64/libsqlite3.so.0.8.6.debug...done. done. Loaded symbols for /lib64/libsqlite3.so.0 Reading symbols from /lib64/libfreeblpriv3.so...Reading symbols from /usr/lib/debug/usr/lib64/libfreeblpriv3.so.debug...done. done. Loaded symbols for /lib64/libfreeblpriv3.so 0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) (gdb) cont Continuing. Program received signal SIGUSR2, User defined signal 2. 0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) (gdb) finish Run till exit from #0 0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 usleep (useconds=useconds@entry=10000) at ../sysdeps/unix/sysv/linux/usleep.c:33 33 } (gdb) thread apply all bt Thread 46 (Thread 0x7f5f97fff700 (LWP 167)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f97ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100c900, data=0x7f5f973e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c900) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f97fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 45 (Thread 0x7f5f887ff700 (LWP 168)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f887fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa108eb00, data=0x7f5f87be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa108eb00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f887ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 44 (Thread 0x7f5f78fff700 (LWP 169)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f78ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa2714100, data=0x7f5f783e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa2714100) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f78fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 43 (Thread 0x7f5f697ff700 (LWP 170)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f697fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa26f6f00, data=0x7f5f68be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa26f6f00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f697ff700) at pthread_create.c:308 ---Type to continue, or q to quit--- #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 42 (Thread 0x7f5f59fff700 (LWP 171)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f59ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa10fa000, data=0x7f5f593e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10fa000) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f59fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 41 (Thread 0x7f5f4a7ff700 (LWP 172)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5f48e9fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9f00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5f3b122000, p=p@entry=0x7f5f48e9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9f00, p=0x7f5f48e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9f00, p=p@entry=0x7f5f48e9fe00, slot=slot@entry=0x7f5fa17bc780) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f48e9fe00, s=0x7f5fa17bc780, tv=0x7f5fa10f9f00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5f49be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9f00, data=0x7f5f49be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9f00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f4a7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 40 (Thread 0x7f5f3afff700 (LWP 173)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5f3969fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9e00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5f2b928000, p=p@entry=0x7f5f3969fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9e00, p=0x7f5f3969fe00, data=, pq=, postpq=) ---Type to continue, or q to quit--- at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9e00, p=p@entry=0x7f5f3969fe00, slot=slot@entry=0x7f5fa17bcf00) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f3969fe00, s=0x7f5fa17bcf00, tv=0x7f5fa10f9e00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5f3a3e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9e00, data=0x7f5f3a3e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9e00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f3afff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 39 (Thread 0x7f5f2b7ff700 (LWP 174)): #0 __lll_unlock_wake () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:371 #1 0x00007f5fc972ac53 in _L_unlock_697 () from /lib64/libpthread.so.0 #2 0x00007f5fc972abde in __pthread_mutex_unlock_usercnt (decr=1, mutex=mutex@entry=0x7f578725d750) at pthread_mutex_unlock.c:52 #3 __GI___pthread_mutex_unlock (mutex=mutex@entry=0x7f578725d750) at pthread_mutex_unlock.c:297 #4 0x000000000041922d in AppLayerHandleUdp (tv=tv@entry=0x7f5fa10f9d00, tctx=0x7f5f2a80e040, p=p@entry=0x7f5f29e9e200, f=0x7f578725d700) at app-layer.c:530 #5 0x000000000044d0a2 in DecodeUDP (tv=tv@entry=0x7f5fa10f9d00, dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9e200, pkt=0x7f57fed2e022 "", len=, pq=pq@entry=0x7f5fa17bd6c0) at decode-udp.c:97 #6 0x000000000044ab5d in DecodeIPV4 (tv=tv@entry=0x7f5fa10f9d00, dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9e200, pkt=0x7f57fed2e00e "E", len=, pq=pq@entry=0x7f5fa17bd6c0) at decode-ipv4.c:565 #7 0x000000000044ee6c in DefragInsertFrag (tv=tv@entry=0x7f5fa10f9d00, dtv=dtv@entry=0x7f5f2abfa080, tracker=tracker@entry=0x7f5fc7d7fa80, p=p@entry=0x7f5f29e9fe00, pq=pq@entry=0x7f5fa17bd6c0) at defrag.c:784 #8 0x000000000044f4d2 in Defrag (tv=tv@entry=0x7f5fa10f9d00, dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9fe00, pq=pq@entry=0x7f5fa17bd6c0) at defrag.c:947 #9 0x000000000044acbe in DecodeIPV4 (tv=tv@entry=0x7f5fa10f9d00, dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9fe00, pkt=pkt@entry=0x7f5c55739910 "E", len=len@entry=1139, pq=pq@entry=0x7f5fa17bd6c0) at decode-ipv4.c:536 #10 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa10f9d00, dtv=dtv@entry=0x7f5f2abfa080, p=p@entry=0x7f5f29e9fe00, pkt=0x7f5c55739902 "@U9Y\325\242", len=, pq=pq@entry=0x7f5fa17bd6c0) at decode-ethernet.c:60 #11 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa10f9d00, p=0x7f5f29e9fe00, ---Type to continue, or q to quit--- data=0x7f5f2abfa080, pq=0x7f5fa17bd6c0, postpq=) at source-af-packet.c:1847 #12 0x0000000000537239 in DecodeAFP (tv=, p=, data=, pq=, postpq=) at source-af-packet.c:1827 #13 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9d00, p=p@entry=0x7f5f29e9fe00, slot=slot@entry=0x7f5fa17bd680) at tm-threads.c:132 #14 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f29e9fe00, s=0x7f5fa17bd680, tv=0x7f5fa10f9d00) at tm-threads.h:149 #15 AFPReadFromRing (ptv=ptv@entry=0x7f5f2abe3140) at source-af-packet.c:874 #16 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9d00, data=0x7f5f2abe3140, slot=) at source-af-packet.c:1214 #17 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9d00) at tm-threads.c:336 #18 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f2b7ff700) at pthread_create.c:308 #19 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 38 (Thread 0x7f5f1bfff700 (LWP 175)): #0 0x0000000000518b16 in OutputPacketLog (tv=0x7f5fa10f9c00, p=0x7f5f1a69fe00, thread_data=0x7f5f1afff078, pq=0x7f5fa17be340, postpq=0x0) at output-packet.c:93 #1 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9c00, p=p@entry=0x7f5f1a69fe00, slot=slot@entry=0x7f5fa17bde00) at tm-threads.c:132 #2 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f1a69fe00, s=0x7f5fa17bde00, tv=0x7f5fa10f9c00) at tm-threads.h:149 #3 AFPReadFromRing (ptv=ptv@entry=0x7f5f1b3e3140) at source-af-packet.c:874 #4 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9c00, data=0x7f5f1b3e3140, slot=) at source-af-packet.c:1214 #5 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9c00) at tm-threads.c:336 #6 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f1bfff700) at pthread_create.c:308 #7 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 37 (Thread 0x7f5f0c7ff700 (LWP 176)): #0 0x0000000000553c6d in StreamTcpPruneSession (f=0x7f5fc5ca41c0, flags=4 '\004') at stream-tcp-reassemble.c:2474 #1 0x000000000055d7f3 in TmqhOutputPacketpool (t=, p=0x7f5f0ae9fe00) at tmqh-packetpool.c:454 #2 0x0000000000539477 in TmThreadsSlotProcessPkt (p=0x7f5f0ae9fe00, s=0x7f5fa17be580, tv=0x7f5fa10f9b00) at tm-threads.h:163 #3 AFPReadFromRing (ptv=ptv@entry=0x7f5f0bbe3140) at source-af-packet.c:874 #4 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9b00, data=0x7f5f0bbe3140, slot=) at source-af-packet.c:1214 #5 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9b00) ---Type to continue, or q to quit--- at tm-threads.c:336 #6 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f0c7ff700) at pthread_create.c:308 #7 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 36 (Thread 0x7f5efcfff700 (LWP 177)): #0 PacketAlertHandle (pos=0, p=0x7f5efb69fe00, s=0x7f5fc7c72000, det_ctx=0x7f5eed92a000, de_ctx=0x7f5fa2dc7000) at detect-engine-alert.c:116 #1 PacketAlertFinalize (de_ctx=de_ctx@entry=0x7f5fa2dc7000, det_ctx=det_ctx@entry=0x7f5eed92a000, p=p@entry=0x7f5efb69fe00) at detect-engine-alert.c:249 #2 0x0000000000461f44 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9a00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5eed92a000, p=p@entry=0x7f5efb69fe00) at detect.c:1817 #3 0x0000000000463272 in Detect (tv=0x7f5fa10f9a00, p=0x7f5efb69fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9a00, p=p@entry=0x7f5efb69fe00, slot=slot@entry=0x7f5fa17bed00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5efb69fe00, s=0x7f5fa17bed00, tv=0x7f5fa10f9a00) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5efc3e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9a00, data=0x7f5efc3e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9a00) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5efcfff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 35 (Thread 0x7f5eed7ff700 (LWP 178)): #0 DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5eebe9fe14) at detect-engine-address.c:1659 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9900, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ede122000, p=p@entry=0x7f5eebe9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9900, p=0x7f5eebe9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9900, p=p@entry=0x7f5eebe9fe00, slot=slot@entry=0x7f5fa17bf480) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eebe9fe00, s=0x7f5fa17bf480, tv=0x7f5fa10f9900) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5eecbe3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9900, ---Type to continue, or q to quit--- data=0x7f5eecbe3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9900) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eed7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 34 (Thread 0x7f5eddfff700 (LWP 179)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:135 #1 0x00007f5fc9729d02 in _L_lock_791 () from /lib64/libpthread.so.0 #2 0x00007f5fc9729c08 in __GI___pthread_mutex_lock ( mutex=mutex@entry=0x7f5fc6b0ee00) at pthread_mutex_lock.c:64 #3 0x00000000004eb666 in HostGetHostFromHash (a=0x7f5edc69fe14) at host.c:468 #4 0x000000000049cfe5 in PacketAlertThreshold ( de_ctx=de_ctx@entry=0x7f5fa2dc7000, det_ctx=det_ctx@entry=0x7f5ece922000, td=0x7f5fa2912b80, p=p@entry=0x7f5edc69fe00, s=s@entry=0x7f5fc7c74800) at detect-engine-threshold.c:626 #5 0x0000000000478e46 in PacketAlertHandle (pos=0, p=0x7f5edc69fe00, s=0x7f5fc7c74800, det_ctx=0x7f5ece922000, de_ctx=0x7f5fa2dc7000) at detect-engine-alert.c:116 #6 PacketAlertFinalize (de_ctx=de_ctx@entry=0x7f5fa2dc7000, det_ctx=det_ctx@entry=0x7f5ece922000, p=p@entry=0x7f5edc69fe00) at detect-engine-alert.c:249 #7 0x0000000000461f44 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9800, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ece922000, p=p@entry=0x7f5edc69fe00) at detect.c:1817 #8 0x0000000000463272 in Detect (tv=0x7f5fa10f9800, p=0x7f5edc69fe00, data=, pq=, postpq=) at detect.c:2031 #9 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9800, p=p@entry=0x7f5edc69fe00, slot=slot@entry=0x7f5fa17bfc00) at tm-threads.c:132 #10 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5edc69fe00, s=0x7f5fa17bfc00, tv=0x7f5fa10f9800) at tm-threads.h:149 #11 AFPReadFromRing (ptv=ptv@entry=0x7f5edd3e3140) at source-af-packet.c:874 #12 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9800, data=0x7f5edd3e3140, slot=) at source-af-packet.c:1214 #13 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9800) at tm-threads.c:336 #14 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eddfff700) at pthread_create.c:308 #15 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 33 (Thread 0x7f5ece7ff700 (LWP 180)): #0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5ecce9fe14) at detect-engine-address.c:1660 ---Type to continue, or q to quit--- #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9700, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ebf122000, p=p@entry=0x7f5ecce9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9700, p=0x7f5ecce9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9700, p=p@entry=0x7f5ecce9fe00, slot=slot@entry=0x7f5fa17c0380) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5ecce9fe00, s=0x7f5fa17c0380, tv=0x7f5fa10f9700) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5ecdbe3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9700, data=0x7f5ecdbe3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9700) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ece7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 32 (Thread 0x7f5ebefff700 (LWP 181)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5eaf922130, buf=0x7f5b829e9314 "\023>\275\216\023M4\035\315\267~\215\224\364Mq]\274\071\230V\336\227\306\217\254\225\245\064\232e\315\265`\313:g\352?>Z\323\222q\342\354\307\273\016/\211Y-\003\217\266m(c\266\304\030XF\343\026/\030\360}\005\223\220\201\330yH\017}\355k\r\366fZkHJ\373Oi@\327l_\210\364oW\020\334vA\354\235\220\217\314.DR\273\372\370\027\267\066\226C\275\345\320\333\025\335\345\345w\347R\322\305y\226\t\325\214\316\312/{\247r\271\022X0f[Tv\210|S\b\265\266Q\334\021h6\023\210\314;s\263\277O!\206\026|Y2Y\316\372\313\365@t!6\346\222\270\200\214\033\326\315\261\215\334\261\062=@"..., buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5ebd69fe00, smsg=0x0, det_ctx=0x7f5eaf922000, de_ctx=0x7f5fa2dc7000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9600, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5eaf922000, p=p@entry=0x7f5ebd69fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa10f9600, p=0x7f5ebd69fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9600, p=p@entry=0x7f5ebd69fe00, slot=slot@entry=0x7f5fa17c0b00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5ebd69fe00, s=0x7f5fa17c0b00, tv=0x7f5fa10f9600) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5ebe3e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9600, ---Type to continue, or q to quit--- data=0x7f5ebe3e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9600) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ebefff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 31 (Thread 0x7f5eaf7ff700 (LWP 182)): #0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5eade9fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9500, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5ea0122000, p=p@entry=0x7f5eade9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9500, p=0x7f5eade9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9500, p=p@entry=0x7f5eade9fe00, slot=slot@entry=0x7f5fa17da3c0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eade9fe00, s=0x7f5fa17da3c0, tv=0x7f5fa10f9500) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5eaebe3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9500, data=0x7f5eaebe3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9500) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eaf7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 30 (Thread 0x7f5e9ffff700 (LWP 183)): #0 0x0000000000496427 in DetectProtoContainsProto ( dp=dp@entry=0x7f5fc7c74c16, proto=6) at detect-engine-proto.c:170 #1 0x0000000000461ead in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9400, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e9092c000, p=p@entry=0x7f5e9e69fe00) at detect.c:1590 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9400, p=0x7f5e9e69fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9400, p=p@entry=0x7f5e9e69fe00, slot=slot@entry=0x7f5fa17dab40) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e9e69fe00, s=0x7f5fa17dab40, tv=0x7f5fa10f9400) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e9f3e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9400, data=0x7f5e9f3e3140, slot=) at source-af-packet.c:1214 ---Type to continue, or q to quit--- #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9400) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e9ffff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 29 (Thread 0x7f5e907ff700 (LWP 184)): #0 __lll_lock_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:135 #1 0x00007f5fc9729d02 in _L_lock_791 () from /lib64/libpthread.so.0 #2 0x00007f5fc9729c08 in __GI___pthread_mutex_lock ( mutex=mutex@entry=0x7f578725d750) at pthread_mutex_lock.c:64 #3 0x000000000049b616 in DeStateUpdateInspectTransactionId ( f=f@entry=0x7f578725d700, flags=flags@entry=4 '\004') at detect-engine-state.c:1105 #4 0x00000000004622f4 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9300, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e81122000, p=p@entry=0x7f5e8ee9fe00) at detect.c:1808 #5 0x0000000000463272 in Detect (tv=0x7f5fa10f9300, p=0x7f5e8ee9fe00, data=, pq=, postpq=) at detect.c:2031 #6 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9300, p=p@entry=0x7f5e8ee9fe00, slot=slot@entry=0x7f5fa17db2c0) at tm-threads.c:132 #7 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e8ee9fe00, s=0x7f5fa17db2c0, tv=0x7f5fa10f9300) at tm-threads.h:149 #8 AFPReadFromRing (ptv=ptv@entry=0x7f5e8fbe3140) at source-af-packet.c:874 #9 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9300, data=0x7f5e8fbe3140, slot=) at source-af-packet.c:1214 #10 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9300) at tm-threads.c:336 #11 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e907ff700) at pthread_create.c:308 #12 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 28 (Thread 0x7f5e80fff700 (LWP 185)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5e71932130, buf=0x7f5b11bd9f68 "\006\306 \221\314m\034F\025q\237/z\326\351\207\241\263b3v\262:\246_5\200V31\227\326^\304\347\354Ej\371\\\224\327\277s4\024\061y\311\234\201*\243\316\332J\365\022\357Q\v7\242\350\212s\271u\341\246\316\261\250\267\071\200\307k\306\300\302\267\003\217\304\244\266=\201WT\201\304\\\267B\260R\310\344\251a\337n\343\262VU\372\177\256\231\061\v\f\204\327|\311\177#\357\232\376\067B\377", buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=24 '\030', p=0x7f5e7f69fe00, smsg=0x0, det_ctx=0x7f5e71932000, de_ctx=0x7f5fa2dc7000) at detect.c:1095 ---Type to continue, or q to quit--- #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c100, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e71932000, p=p@entry=0x7f5e7f69fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100c100, p=0x7f5e7f69fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c100, p=p@entry=0x7f5e7f69fe00, slot=slot@entry=0x7f5fa17dba40) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e7f69fe00, s=0x7f5fa17dba40, tv=0x7f5fa100c100) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5e803e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c100, data=0x7f5e803e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c100) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e80fff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 27 (Thread 0x7f5e717ff700 (LWP 186)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5e6fe9fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c400, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e62122000, p=p@entry=0x7f5e6fe9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100c400, p=0x7f5e6fe9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c400, p=p@entry=0x7f5e6fe9fe00, slot=slot@entry=0x7f5fa17dc1c0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6fe9fe00, s=0x7f5fa17dc1c0, tv=0x7f5fa100c400) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e70be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c400, data=0x7f5e70be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c400) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e717ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 26 (Thread 0x7f5e61fff700 (LWP 187)): #0 0x000000000048eead in PacketPatternCleanup (t=, det_ctx=0x7f5e52922000) at detect-engine-mpm.c:738 #1 0x0000000000461f61 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c500, ---Type to continue, or q to quit--- de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e52922000, p=p@entry=0x7f5e6069fe00) at detect.c:1825 #2 0x0000000000463272 in Detect (tv=0x7f5fa100c500, p=0x7f5e6069fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c500, p=p@entry=0x7f5e6069fe00, slot=slot@entry=0x7f5fa17dc940) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6069fe00, s=0x7f5fa17dc940, tv=0x7f5fa100c500) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e613e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c500, data=0x7f5e613e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c500) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e61fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 25 (Thread 0x7f5e527ff700 (LWP 188)): #0 DetectPrefilterBuildNonMpmList (mask=, det_ctx=) at detect.c:1221 #1 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c800, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e43132000, p=p@entry=0x7f5e50e9fe00) at detect.c:1456 #2 0x0000000000463272 in Detect (tv=0x7f5fa100c800, p=0x7f5e50e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c800, p=p@entry=0x7f5e50e9fe00, slot=slot@entry=0x7f5fa17dd0c0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e50e9fe00, s=0x7f5fa17dd0c0, tv=0x7f5fa100c800) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e51be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c800, data=0x7f5e51be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c800) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e527ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 24 (Thread 0x7f5e42fff700 (LWP 189)): #0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5e4169fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cb00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e33922000, p=p@entry=0x7f5e4169fe00) ---Type to continue, or q to quit--- at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100cb00, p=0x7f5e4169fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cb00, p=p@entry=0x7f5e4169fe00, slot=slot@entry=0x7f5fa17dd840) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e4169fe00, s=0x7f5fa17dd840, tv=0x7f5fa100cb00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e423e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cb00, data=0x7f5e423e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cb00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e42fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 23 (Thread 0x7f5e337ff700 (LWP 190)): #0 DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5e31e9fe14) at detect-engine-address.c:1667 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cc00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e24122000, p=p@entry=0x7f5e31e9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100cc00, p=0x7f5e31e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cc00, p=p@entry=0x7f5e31e9fe00, slot=slot@entry=0x7f5fa17ddfc0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e31e9fe00, s=0x7f5fa17ddfc0, tv=0x7f5fa100cc00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e32be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cc00, data=0x7f5e32be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cc00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e337ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 22 (Thread 0x7f5e23fff700 (LWP 191)): #0 FlowGetFlowFromHash (tv=tv@entry=0x7f5fa100cd00, dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00) at flow-hash.c:661 #1 0x00000000004e22ae in FlowHandlePacket (tv=tv@entry=0x7f5fa100cd00, dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00) at flow.c:332 #2 0x000000000044cc13 in DecodeTCP (tv=tv@entry=0x7f5fa100cd00, dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00, ---Type to continue, or q to quit--- pkt=, len=, pq=pq@entry=0x7f5fa17de780) at decode-tcp.c:206 #3 0x000000000044a3eb in DecodeIPV4 (tv=tv@entry=0x7f5fa100cd00, dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00, pkt=pkt@entry=0x7f5a61da3800 "E", len=len@entry=52, pq=pq@entry=0x7f5fa17de780) at decode-ipv4.c:561 #4 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa100cd00, dtv=dtv@entry=0x7f5e233fa080, p=p@entry=0x7f5e2269fe00, pkt=0x7f5a61da37f2 "@U9Y\325\243", len=, pq=pq@entry=0x7f5fa17de780) at decode-ethernet.c:60 #5 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa100cd00, p=0x7f5e2269fe00, data=0x7f5e233fa080, pq=0x7f5fa17de780, postpq=) at source-af-packet.c:1847 #6 0x0000000000537239 in DecodeAFP (tv=, p=, data=, pq=, postpq=) at source-af-packet.c:1827 #7 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cd00, p=p@entry=0x7f5e2269fe00, slot=slot@entry=0x7f5fa17de740) at tm-threads.c:132 #8 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e2269fe00, s=0x7f5fa17de740, tv=0x7f5fa100cd00) at tm-threads.h:149 #9 AFPReadFromRing (ptv=ptv@entry=0x7f5e233e3140) at source-af-packet.c:874 #10 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cd00, data=0x7f5e233e3140, slot=) at source-af-packet.c:1214 #11 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cd00) at tm-threads.c:336 #12 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e23fff700) at pthread_create.c:308 #13 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 21 (Thread 0x7f5e147ff700 (LWP 192)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5e05122130, buf=0x7f5a3611d0f4 "Q\356>}.\204\030\271y`y\224;\325\210EP\b5\031\340\070\347\356\a", buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5e12e9fe00, smsg=0x0, det_ctx=0x7f5e05122000, de_ctx=0x7f5fa2dc7000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100ce00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5e05122000, p=p@entry=0x7f5e12e9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100ce00, p=0x7f5e12e9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100ce00, p=p@entry=0x7f5e12e9fe00, slot=slot@entry=0x7f5fa17deec0) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e12e9fe00, ---Type to continue, or q to quit--- s=0x7f5fa17deec0, tv=0x7f5fa100ce00) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5e13be3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100ce00, data=0x7f5e13be3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100ce00) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e147ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 20 (Thread 0x7f5e04fff700 (LWP 193)): #0 0x000000000055d6be in TmqhOutputPacketpool (t=, p=0x7f5e0369fe00) at tmqh-packetpool.c:459 #1 0x0000000000539477 in TmThreadsSlotProcessPkt (p=0x7f5e0369fe00, s=0x7f5fa2cbd780, tv=0x7f5fa100d100) at tm-threads.h:163 #2 AFPReadFromRing (ptv=ptv@entry=0x7f5e043e3140) at source-af-packet.c:874 #3 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d100, data=0x7f5e043e3140, slot=) at source-af-packet.c:1214 #4 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d100) at tm-threads.c:336 #5 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e04fff700) at pthread_create.c:308 #6 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 19 (Thread 0x7f5df57ff700 (LWP 194)): #0 FlowGetAppState (f=f@entry=0x7f578f950740) at flow.c:870 #1 0x00000000004618d9 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d200, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5de6122000, p=p@entry=0x7f5df3e9fe00) at detect.c:1354 #2 0x0000000000463272 in Detect (tv=0x7f5fa100d200, p=0x7f5df3e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d200, p=p@entry=0x7f5df3e9fe00, slot=slot@entry=0x7f5fa2cbdf00) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5df3e9fe00, s=0x7f5fa2cbdf00, tv=0x7f5fa100d200) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5df4be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d200, data=0x7f5df4be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d200) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5df57ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 18 (Thread 0x7f5de5fff700 (LWP 195)): ---Type to continue, or q to quit--- #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5de5ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100d400, data=0x7f5de53e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d400) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5de5fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 17 (Thread 0x7f5dd67ff700 (LWP 196)): #0 0x0000000000461d1e in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d500, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5dc7122000, p=p@entry=0x7f5dd4e9fe00) at detect.c:1508 #1 0x0000000000463272 in Detect (tv=0x7f5fa100d500, p=0x7f5dd4e9fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d500, p=p@entry=0x7f5dd4e9fe00, slot=slot@entry=0x7f5fa2cbee00) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dd4e9fe00, s=0x7f5fa2cbee00, tv=0x7f5fa100d500) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5dd5be3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d500, data=0x7f5dd5be3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d500) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dd67ff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 16 (Thread 0x7f5dc6fff700 (LWP 197)): #0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5dc569fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d600, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5db7922000, p=p@entry=0x7f5dc569fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100d600, p=0x7f5dc569fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d600, p=p@entry=0x7f5dc569fe00, slot=slot@entry=0x7f5fa2cbf580) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dc569fe00, s=0x7f5fa2cbf580, tv=0x7f5fa100d600) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5dc63e3140) at source-af-packet.c:874 ---Type to continue, or q to quit--- #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d600, data=0x7f5dc63e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d600) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dc6fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 15 (Thread 0x7f5db77ff700 (LWP 198)): #0 0x0000000000461ea4 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d900, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5da8122000, p=p@entry=0x7f5db5e9fe00) at detect.c:1590 #1 0x0000000000463272 in Detect (tv=0x7f5fa100d900, p=0x7f5db5e9fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d900, p=p@entry=0x7f5db5e9fe00, slot=slot@entry=0x7f5fa2cbfd00) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5db5e9fe00, s=0x7f5fa2cbfd00, tv=0x7f5fa100d900) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5db6be3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d900, data=0x7f5db6be3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d900) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5db77ff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 14 (Thread 0x7f5da7fff700 (LWP 199)): #0 0x0000000000599460 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5d98933130, buf=0x7f5961be4494 "\037\215F,..bb\305`\340\223\210\026\351\353\342,\230,\304aQR`\254O\252\372\204\246\302\031_\222\024\207\276pY\005!J\246\070\351]\264\331\260F\226\216\260\271\245\036\302\301%\307\342\214\240\273\003\241\204P\a\364\206\006\223y\312\061\211\204\324`U\216\023\222$\351\261\243\065\265ZD\034XZJ\022;GC\301\326n\302\371a\207,\214@\206\324\353!\363-IP\v\330\354\234\344\340b\216\311%\273#\215\224\n'\005:\310\be\212\315\375\320\261F\b\r\255\211tJ`\025\322$h\022\326.o\260\262\274\300\334B\223\267\336\377\203H!y\344\261\207\350m]%\322\202a\346\027\070?\321\335\020F\001\201\034\361\352\371+"..., buflen=) at util-mpm-ac.c:1310 #1 0x0000000000463139 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=24 '\030', p=0x7f5da669fe00, smsg=0x0, det_ctx=0x7f5d98933000, de_ctx=0x7f5fa2dc7000) at detect.c:1086 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100da00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d98933000, p=p@entry=0x7f5da669fe00) at detect.c:1462 ---Type to continue, or q to quit--- #3 0x0000000000463272 in Detect (tv=0x7f5fa100da00, p=0x7f5da669fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100da00, p=p@entry=0x7f5da669fe00, slot=slot@entry=0x7f5fa2cc0480) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5da669fe00, s=0x7f5fa2cc0480, tv=0x7f5fa100da00) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5da73e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100da00, data=0x7f5da73e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100da00) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5da7fff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 13 (Thread 0x7f5d987ff700 (LWP 200)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5d97bfc0c0, buf=0x7f5955276fcc "\361g", buflen=) at util-mpm-ac.c:1325 #1 0x0000000000420829 in AppLayerProtoDetectPMGetProto (f=0x7f57719c1e80, f=0x7f57719c1e80, ipproto=17 '\021', pm_results=0x7f5d987fd0e0, direction=192 '\300', buflen=46, buf=0x7f5955276fcc "\361g", tctx=0x7f5d97bfc0c0) at app-layer-detect-proto.c:243 #2 AppLayerProtoDetectGetProto (tctx=0x7f5d97bfc0c0, f=f@entry=0x7f57719c1e80, buf=0x7f5955276fcc "\361g", buflen=46, ipproto=ipproto@entry=17 '\021', direction=direction@entry=4 '\004') at app-layer-detect-proto.c:1305 #3 0x0000000000419270 in AppLayerHandleUdp (tv=tv@entry=0x7f5fa100dd00, tctx=0x7f5d9780e040, p=p@entry=0x7f5d96e9fe00, f=0x7f57719c1e80) at app-layer.c:494 #4 0x000000000044d0a2 in DecodeUDP (tv=tv@entry=0x7f5fa100dd00, dtv=dtv@entry=0x7f5d97bfa080, p=p@entry=0x7f5d96e9fe00, pkt=0x7f5955276fc4 "$\211", len=, pq=pq@entry=0x7f5fa2cc0c40) at decode-udp.c:97 #5 0x000000000044ab5d in DecodeIPV4 (tv=tv@entry=0x7f5fa100dd00, dtv=dtv@entry=0x7f5d97bfa080, p=p@entry=0x7f5d96e9fe00, pkt=pkt@entry=0x7f5955276fb0 "E", len=len@entry=74, pq=pq@entry=0x7f5fa2cc0c40) at decode-ipv4.c:565 #6 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa100dd00, dtv=dtv@entry=0x7f5d97bfa080, p=p@entry=0x7f5d96e9fe00, pkt=0x7f5955276fa2 "@U9Y\325\243", len=, pq=pq@entry=0x7f5fa2cc0c40) at decode-ethernet.c:60 #7 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa100dd00, p=0x7f5d96e9fe00, data=0x7f5d97bfa080, pq=0x7f5fa2cc0c40, postpq=) at source-af-packet.c:1847 #8 0x0000000000537239 in DecodeAFP (tv=, p=, data=, pq=, postpq=) ---Type to continue, or q to quit--- at source-af-packet.c:1827 #9 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100dd00, p=p@entry=0x7f5d96e9fe00, slot=slot@entry=0x7f5fa2cc0c00) at tm-threads.c:132 #10 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d96e9fe00, s=0x7f5fa2cc0c00, tv=0x7f5fa100dd00) at tm-threads.h:149 #11 AFPReadFromRing (ptv=ptv@entry=0x7f5d97be3140) at source-af-packet.c:874 #12 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100dd00, data=0x7f5d97be3140, slot=) at source-af-packet.c:1214 #13 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100dd00) at tm-threads.c:336 #14 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d987ff700) at pthread_create.c:308 #15 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 12 (Thread 0x7f5d88fff700 (LWP 201)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d88ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100de00, data=0x7f5d883e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100de00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d88fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 11 (Thread 0x7f5d797ff700 (LWP 202)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5d77e9fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100df00, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d6a122000, p=p@entry=0x7f5d77e9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100df00, p=0x7f5d77e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100df00, p=p@entry=0x7f5d77e9fe00, slot=slot@entry=0x7f5fa2cc1b00) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d77e9fe00, s=0x7f5fa2cc1b00, tv=0x7f5fa100df00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5d78be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100df00, data=0x7f5d78be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100df00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d797ff700) ---Type to continue, or q to quit--- at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 10 (Thread 0x7f5d69fff700 (LWP 203)): #0 0x0000000000599480 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5d5a922130, buf=0x7f58fdeeb828 "\200\233\372\312+\354\003\250C:\222\\\266\375d$\230\361\340\360\375\316\236\233\332(\212\\\336t\320\312\244\254\342\245\017.\"\313b\001l\204\026\237\067G\321\335\311\v\355DP\273s,\177/\326\344wk\330\305\315\223)\246\322\275\202\vE\323\377{^\274\207\352\245\273\003\237\217.\360\261\355\237\334|\343\t\223\026", buflen=) at util-mpm-ac.c:1324 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=24 '\030', p=0x7f5d6869fe00, smsg=0x0, det_ctx=0x7f5d5a922000, de_ctx=0x7f5fa2dc7000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e000, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d5a922000, p=p@entry=0x7f5d6869fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100e000, p=0x7f5d6869fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e000, p=p@entry=0x7f5d6869fe00, slot=slot@entry=0x7f5fa2e343c0) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d6869fe00, s=0x7f5fa2e343c0, tv=0x7f5fa100e000) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5d693e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e000, data=0x7f5d693e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e000) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d69fff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 9 (Thread 0x7f5d5a7ff700 (LWP 204)): #0 0x0000000000461d11 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e100, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d4b143000, p=p@entry=0x7f5d58e9fe00) at detect.c:1508 #1 0x0000000000463272 in Detect (tv=0x7f5fa100e100, p=0x7f5d58e9fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e100, p=p@entry=0x7f5d58e9fe00, slot=slot@entry=0x7f5fa2e34b40) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d58e9fe00, s=0x7f5fa2e34b40, tv=0x7f5fa100e100) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5d59be3140) at source-af-packet.c:874 ---Type to continue, or q to quit--- #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e100, data=0x7f5d59be3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e100) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d5a7ff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 8 (Thread 0x7f5d4afff700 (LWP 205)): #0 DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5d4969fe14) at detect-engine-address.c:1659 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e200, de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d3b922000, p=p@entry=0x7f5d4969fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100e200, p=0x7f5d4969fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e200, p=p@entry=0x7f5d4969fe00, slot=slot@entry=0x7f5fa2e352c0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d4969fe00, s=0x7f5fa2e352c0, tv=0x7f5fa100e200) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5d4a3e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e200, data=0x7f5d4a3e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e200) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d4afff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 7 (Thread 0x7f5d3b7ff700 (LWP 206)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5d2c122130, buf=0x7f58a7ce9f74 "\357\301\322o\307\220\032\302\067/nx\336\070\006\262\301#>\023\035\311<\031Y\021\016M\376\v\267\200\211\220R\366d\234m\202\257\023y\260\360[\266y\334\347\337\n|4 \240\300\177\066h\314\324\347\231\243\223\366\264~s\032p\nwH6Y\244f@\326\363@\240bCZ\373r@\205\344i{\206\006\006\327\274l\207\223\210\250\253\205!\262APE\245D;\035G\240\315W\247\353S\037\313\345 \361\242p\231\070\006\324\065mk\261}\224\267\272\322Y\241\334L{W\b\255\313\266\367\300\372\220O\307\326P\263\364\357\330\221\316\n0RD<\216T\370J+[w#\263\365\317L\323\221\355\372\350\350\361\250\256'\036\211\332\017\022\274L"..., buflen=) at util-mpm-ac.c:1325 #1 0x0000000000463139 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=4 '\004', p=0x7f5d39e9fe00, smsg=0x0, det_ctx=0x7f5d2c122000, de_ctx=0x7f5fa2dc7000) at detect.c:1086 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e300, ---Type to continue, or q to quit--- de_ctx=0x7f5fa2dc7000, det_ctx=0x7f5d2c122000, p=p@entry=0x7f5d39e9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100e300, p=0x7f5d39e9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e300, p=p@entry=0x7f5d39e9fe00, slot=slot@entry=0x7f5fa2e35a40) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d39e9fe00, s=0x7f5fa2e35a40, tv=0x7f5fa100e300) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5d3abe3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e300, data=0x7f5d3abe3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e300) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d3b7ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 6 (Thread 0x7f5d2bfff700 (LWP 207)): #0 0x00007f5fc92489b3 in select () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000056728a in UnixMain (this=this@entry=0x85b9a0 ) at unix-manager.c:520 #2 0x00000000005674e2 in UnixManager (th_v=0x7f5fa100e400, thread_data=) at unix-manager.c:910 #3 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e400) at tm-threads.c:600 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2bfff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 5 (Thread 0x7f5d2afff700 (LWP 208)): #0 FlowManagerHashRowTimeout (counters=, emergency=, ts=, f=0x7f5773a83e40) at flow-manager.c:280 #1 FlowTimeoutHash (try_cnt=0, counters=, hash_max=65536, hash_min=, ts=0x7f5d2affdc70) at flow-manager.c:397 #2 FlowManager (th_v=0x7f5fa100e500, thread_data=0x7f5d2a00e040) at flow-manager.c:620 #3 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e500) at tm-threads.c:600 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2afff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 4 (Thread 0x7f5d293ff700 (LWP 209)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () ---Type to continue, or q to quit--- at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x00000000004e5c3f in FlowRecycler (th_v=0x7f5fa100e600, thread_data=0x7f5d2840e058) at flow-manager.c:844 #2 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e600) at tm-threads.c:600 #3 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d293ff700) at pthread_create.c:308 #4 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 3 (Thread 0x7f5d283ff700 (LWP 210)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x0000000000444e1f in StatsWakeupThread (arg=0x7f5fa100e700) at counters.c:435 #2 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d283ff700) at pthread_create.c:308 #3 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 2 (Thread 0x7f5d27bfe700 (LWP 211)): #0 0x00007f5fc9242abd in write () at ../sysdeps/unix/syscall-template.S:81 #1 0x00007f5fc91d1383 in _IO_new_file_write (f=0x7f5f9a2f8800, data=0x7f5fcc973000, n=2967) at fileops.c:1301 #2 0x00007f5fc91d27ec in new_do_write (to_do=2967, data=0x7f5fcc973000 '-' , "\nDate: 2/19/2016 -- 23:49:55 (uptime: 0d, 00h 07m 20s)\n", '-' , "\nCounter "..., fp=0x7f5f9a2f8800) at fileops.c:537 #3 _IO_new_do_write (fp=0x7f5f9a2f8800, data=0x7f5fcc973000 '-' , "\nDate: 2/19/2016 -- 23:49:55 (uptime: 0d, 00h 07m 20s)\n", '-' , "\nCounter "..., to_do=2967) at fileops.c:510 #4 0x00007f5fc91d0be0 in _IO_new_file_sync (fp=0x7f5f9a2f8800) at fileops.c:891 #5 0x00007f5fc91c6482 in __GI__IO_fflush (fp=0x7f5f9a2f8800) at iofflush.c:41 #6 0x0000000000587667 in SCLogFileWrite ( buffer=0x7f5d26c10010 '-' , "\nDate: 2/19/2016 -- 23:49:55 (uptime: 0d, 00h 07m 20s)\n", '-' , "\nCounter "..., buffer_len=2967, log_ctx=0x7f5f9b3ed3c0) at util-logopenfile.c:144 #7 0x00000000004fb7bb in LogStatsLogger (tv=, thread_data=0x7f5d26c0f040, st=0x835d40 ) at log-stats.c:157 #8 0x000000000051a209 in OutputStatsLog (tv=tv@entry=0x7f5fa100e800, thread_data=thread_data@entry=0x7f5d26c0e058, st=st@entry=0x835d40 ) at output-stats.c:101 #9 0x0000000000446204 in StatsOutput (tv=0x7f5fa100e800) at counters.c:752 #10 StatsMgmtThread (arg=0x7f5fa100e800) at counters.c:362 #11 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d27bfe700) at pthread_create.c:308 #12 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 ---Type to continue, or q to quit--- Thread 1 (Thread 0x7f5fcc962940 (LWP 1)): #0 usleep (useconds=useconds@entry=10000) at ../sysdeps/unix/sysv/linux/usleep.c:33 #1 0x0000000000410ddd in main (argc=, argv=) at suricata.c:2446 (gdb) (gdb) cont Continuing. ^C Program received signal SIGINT, Interrupt. 0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) (gdb) Continuing. ^C Program received signal SIGINT, Interrupt. 0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 81 T_PSEUDO (SYSCALL_SYMBOL, SYSCALL_NAME, SYSCALL_NARGS) (gdb) thread apply all bt Thread 46 (Thread 0x7f5f97fff700 (LWP 167)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f97ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100c900, data=0x7f5f973e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c900) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f97fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 45 (Thread 0x7f5f887ff700 (LWP 168)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f887fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa108eb00, data=0x7f5f87be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa108eb00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f887ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 44 (Thread 0x7f5f78fff700 (LWP 169)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f78ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa2714100, data=0x7f5f783e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa2714100) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f78fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 43 (Thread 0x7f5f697ff700 (LWP 170)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f697fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa26f6f00, data=0x7f5f68be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa26f6f00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f697ff700) at pthread_create.c:308 ---Type to continue, or q to quit--- #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 42 (Thread 0x7f5f59fff700 (LWP 171)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f59ffdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa10fa000, data=0x7f5f593e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10fa000) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f59fff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 41 (Thread 0x7f5f4a7ff700 (LWP 172)): #0 0x00007f5fc9729c02 in __GI___pthread_mutex_lock ( mutex=mutex@entry=0x7f5780b5bb90) at pthread_mutex_lock.c:64 #1 0x0000000000461815 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9f00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbe5b6000, p=p@entry=0x7f5f48e9fe00) at detect.c:1287 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9f00, p=0x7f5f48e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9f00, p=p@entry=0x7f5f48e9fe00, slot=slot@entry=0x7f5fa17bc780) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f48e9fe00, s=0x7f5fa17bc780, tv=0x7f5fa10f9f00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5f49be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9f00, data=0x7f5f49be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9f00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f4a7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 40 (Thread 0x7f5f3afff700 (LWP 173)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5f3affdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa10f9e00, data=0x7f5f3a3e3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9e00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f3afff700) at pthread_create.c:308 ---Type to continue, or q to quit--- #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 39 (Thread 0x7f5f2b7ff700 (LWP 174)): #0 DetectPrefilterBuildNonMpmList (mask=, det_ctx=) at detect.c:1222 #1 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9d00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbc53e000, p=p@entry=0x7f5f29e9fe00) at detect.c:1456 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9d00, p=0x7f5f29e9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9d00, p=p@entry=0x7f5f29e9fe00, slot=slot@entry=0x7f5fa17bd680) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f29e9fe00, s=0x7f5fa17bd680, tv=0x7f5fa10f9d00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5f2abe3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9d00, data=0x7f5f2abe3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9d00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f2b7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 38 (Thread 0x7f5f1bfff700 (LWP 175)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5f1a69fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9c00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c11e000, p=p@entry=0x7f5f1a69fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9c00, p=0x7f5f1a69fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9c00, p=p@entry=0x7f5f1a69fe00, slot=slot@entry=0x7f5fa17bde00) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f1a69fe00, s=0x7f5fa17bde00, tv=0x7f5fa10f9c00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5f1b3e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9c00, data=0x7f5f1b3e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9c00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f1bfff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () ---Type to continue, or q to quit--- at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 37 (Thread 0x7f5f0c7ff700 (LWP 176)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5f0ae9fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9b00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c14a000, p=p@entry=0x7f5f0ae9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9b00, p=0x7f5f0ae9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9b00, p=p@entry=0x7f5f0ae9fe00, slot=slot@entry=0x7f5fa17be580) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5f0ae9fe00, s=0x7f5fa17be580, tv=0x7f5fa10f9b00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5f0bbe3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9b00, data=0x7f5f0bbe3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9b00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5f0c7ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 36 (Thread 0x7f5efcfff700 (LWP 177)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f573c176130, buf=0x7f5bf8c38078 "\325#\362\347S\327\215\244\373\212\243[\232\344<3\216\243\f1\337\261\254\062s\311\346\255\022\a\216\364\322s\370S\217Bi\274\344qV!\274\001\307J8\367\307j^\334Q\327\361\240A\212=)\006;R\377", buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5efb69fe00, smsg=0x0, det_ctx=0x7f573c176000, de_ctx=0x7f5fa10ae000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9a00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c176000, p=p@entry=0x7f5efb69fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa10f9a00, p=0x7f5efb69fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9a00, p=p@entry=0x7f5efb69fe00, slot=slot@entry=0x7f5fa17bed00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5efb69fe00, s=0x7f5fa17bed00, tv=0x7f5fa10f9a00) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5efc3e3140) at source-af-packet.c:874 ---Type to continue, or q to quit--- #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9a00, data=0x7f5efc3e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9a00) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5efcfff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 35 (Thread 0x7f5eed7ff700 (LWP 178)): #0 0x000000000047488b in DetectAddressMatch (dd=dd@entry=0x7f5fbca76f80, a=a@entry=0x7f5eebe9fe14) at detect-engine-address.c:1814 #1 0x000000000047697b in DetectAddressLookupInHead (gh=, a=a@entry=0x7f5eebe9fe14) at detect-engine-address.c:1890 #2 0x000000000046169b in SigMatchSignaturesGetSgh ( de_ctx=de_ctx@entry=0x7f5fa10ae000, det_ctx=det_ctx@entry=0x7f573c1a2000, p=p@entry=0x7f5eebe9fe00) at detect.c:623 #3 0x0000000000462184 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9900, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c1a2000, p=p@entry=0x7f5eebe9fe00) at detect.c:1400 #4 0x0000000000463272 in Detect (tv=0x7f5fa10f9900, p=0x7f5eebe9fe00, data=, pq=, postpq=) at detect.c:2031 #5 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9900, p=p@entry=0x7f5eebe9fe00, slot=slot@entry=0x7f5fa17bf480) at tm-threads.c:132 #6 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eebe9fe00, s=0x7f5fa17bf480, tv=0x7f5fa10f9900) at tm-threads.h:149 #7 AFPReadFromRing (ptv=ptv@entry=0x7f5eecbe3140) at source-af-packet.c:874 #8 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9900, data=0x7f5eecbe3140, slot=) at source-af-packet.c:1214 #9 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9900) at tm-threads.c:336 #10 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eed7ff700) at pthread_create.c:308 #11 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 34 (Thread 0x7f5eddfff700 (LWP 179)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5edc69fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9800, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c1ce000, p=p@entry=0x7f5edc69fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa10f9800, p=0x7f5edc69fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9800, p=p@entry=0x7f5edc69fe00, slot=slot@entry=0x7f5fa17bfc00) ---Type to continue, or q to quit--- at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5edc69fe00, s=0x7f5fa17bfc00, tv=0x7f5fa10f9800) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5edd3e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9800, data=0x7f5edd3e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9800) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eddfff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 33 (Thread 0x7f5ece7ff700 (LWP 180)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5ece7fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa10f9700, data=0x7f5ecdbe3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9700) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ece7ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 32 (Thread 0x7f5ebefff700 (LWP 181)): #0 0x0000000000599480 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f573c22b130, buf=0x7f5b7a08be64 "\377\"\005\223\031\001", buflen=) at util-mpm-ac.c:1324 #1 0x0000000000463139 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=4 '\004', p=0x7f5ebd69fe00, smsg=0x0, det_ctx=0x7f573c22b000, de_ctx=0x7f5fa10ae000) at detect.c:1086 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9600, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c22b000, p=p@entry=0x7f5ebd69fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa10f9600, p=0x7f5ebd69fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9600, p=p@entry=0x7f5ebd69fe00, slot=slot@entry=0x7f5fa17c0b00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5ebd69fe00, s=0x7f5fa17c0b00, tv=0x7f5fa10f9600) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5ebe3e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9600, data=0x7f5ebe3e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9600) ---Type to continue, or q to quit--- at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5ebefff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 31 (Thread 0x7f5eaf7ff700 (LWP 182)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f573c255130, buf=0x7f5b54a9f614 ' ' , "\n", ' ' , "\n", ' ' ..., buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5eade9fe00, smsg=0x0, det_ctx=0x7f573c255000, de_ctx=0x7f5fa10ae000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9500, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c255000, p=p@entry=0x7f5eade9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa10f9500, p=0x7f5eade9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9500, p=p@entry=0x7f5eade9fe00, slot=slot@entry=0x7f5fa17da3c0) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5eade9fe00, s=0x7f5fa17da3c0, tv=0x7f5fa10f9500) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5eaebe3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9500, data=0x7f5eaebe3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9500) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5eaf7ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 30 (Thread 0x7f5e9ffff700 (LWP 183)): #0 0x00000000004625b2 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9400, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c289000, p=p@entry=0x7f5e9e69fe00) at detect.c:1623 #1 0x0000000000463272 in Detect (tv=0x7f5fa10f9400, p=0x7f5e9e69fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9400, p=p@entry=0x7f5e9e69fe00, slot=slot@entry=0x7f5fa17dab40) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e9e69fe00, s=0x7f5fa17dab40, tv=0x7f5fa10f9400) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5e9f3e3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9400, ---Type to continue, or q to quit--- data=0x7f5e9f3e3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9400) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e9ffff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 29 (Thread 0x7f5e907ff700 (LWP 184)): #0 0x0000000000599480 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f573c2b5130, buf=0x7f5b2da106a8 "\300\342~!Y\207\266\263\276Q\367I\215\217\261\344\177#\371\327\021l\273\314\221\367e8\372\216k\326\065+\017\355O\016\315g\326P\245T\237\357\257O\345\372\327\222\304\306\336\345Y\206\n7#\371\327\006\"6\225\373\232A\236\227\360\246U\232\303T\260\220e\v+\021\236\314\b?\312\272\257\ri\021\351\276'\327!\222\060D\262-\334$\216\060\371\316>\204b\271\017\206\251\366}wRA\367\036%a\371\377", buflen=) at util-mpm-ac.c:1324 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5e8ee9fe00, smsg=0x0, det_ctx=0x7f573c2b5000, de_ctx=0x7f5fa10ae000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa10f9300, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c2b5000, p=p@entry=0x7f5e8ee9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa10f9300, p=0x7f5e8ee9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa10f9300, p=p@entry=0x7f5e8ee9fe00, slot=slot@entry=0x7f5fa17db2c0) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e8ee9fe00, s=0x7f5fa17db2c0, tv=0x7f5fa10f9300) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5e8fbe3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa10f9300, data=0x7f5e8fbe3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa10f9300) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e907ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 28 (Thread 0x7f5e80fff700 (LWP 185)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5e7f69fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c100, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c2e1000, p=p@entry=0x7f5e7f69fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100c100, p=0x7f5e7f69fe00, ---Type to continue, or q to quit--- data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c100, p=p@entry=0x7f5e7f69fe00, slot=slot@entry=0x7f5fa17dba40) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e7f69fe00, s=0x7f5fa17dba40, tv=0x7f5fa100c100) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e803e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c100, data=0x7f5e803e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c100) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e80fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 27 (Thread 0x7f5e717ff700 (LWP 186)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5e6fe9fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c400, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbdcea000, p=p@entry=0x7f5e6fe9fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100c400, p=0x7f5e6fe9fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c400, p=p@entry=0x7f5e6fe9fe00, slot=slot@entry=0x7f5fa17dc1c0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6fe9fe00, s=0x7f5fa17dc1c0, tv=0x7f5fa100c400) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e70be3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c400, data=0x7f5e70be3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c400) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e717ff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 26 (Thread 0x7f5e61fff700 (LWP 187)): #0 0x0000000000461ead in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c500, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5fbde7c000, p=p@entry=0x7f5e6069fe00) at detect.c:1590 #1 0x0000000000463272 in Detect (tv=0x7f5fa100c500, p=0x7f5e6069fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c500, ---Type to continue, or q to quit--- p=p@entry=0x7f5e6069fe00, slot=slot@entry=0x7f5fa17dc940) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e6069fe00, s=0x7f5fa17dc940, tv=0x7f5fa100c500) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5e613e3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c500, data=0x7f5e613e3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c500) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e61fff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 25 (Thread 0x7f5e527ff700 (LWP 188)): #0 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100c800, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c349000, p=p@entry=0x7f5e50e9fe00) at detect.c:1590 #1 0x0000000000463272 in Detect (tv=0x7f5fa100c800, p=0x7f5e50e9fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100c800, p=p@entry=0x7f5e50e9fe00, slot=slot@entry=0x7f5fa17dd0c0) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e50e9fe00, s=0x7f5fa17dd0c0, tv=0x7f5fa100c800) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5e51be3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100c800, data=0x7f5e51be3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100c800) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e527ff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 24 (Thread 0x7f5e42fff700 (LWP 189)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5e4169fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cb00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c375000, p=p@entry=0x7f5e4169fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100cb00, p=0x7f5e4169fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cb00, p=p@entry=0x7f5e4169fe00, slot=slot@entry=0x7f5fa17dd840) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e4169fe00, ---Type to continue, or q to quit--- s=0x7f5fa17dd840, tv=0x7f5fa100cb00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5e423e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cb00, data=0x7f5e423e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cb00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e42fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 23 (Thread 0x7f5e337ff700 (LWP 190)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5e337fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100cc00, data=0x7f5e32be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cc00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e337ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 22 (Thread 0x7f5e23fff700 (LWP 191)): #0 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100cd00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c3cd000, p=p@entry=0x7f5e2269fe00) at detect.c:1498 #1 0x0000000000463272 in Detect (tv=0x7f5fa100cd00, p=0x7f5e2269fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100cd00, p=p@entry=0x7f5e2269fe00, slot=slot@entry=0x7f5fa17de740) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e2269fe00, s=0x7f5fa17de740, tv=0x7f5fa100cd00) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5e233e3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100cd00, data=0x7f5e233e3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100cd00) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e23fff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 21 (Thread 0x7f5e147ff700 (LWP 192)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f573c3f7130, buf=0x7f5a46bddd54 ">!\350\027\036\024\361f\224\267\rm\375\253\247]", ---Type to continue, or q to quit--- buflen=) at util-mpm-ac.c:1325 #1 0x0000000000463139 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5e12e9fe00, smsg=0x0, det_ctx=0x7f573c3f7000, de_ctx=0x7f5fa10ae000) at detect.c:1086 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100ce00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f573c3f7000, p=p@entry=0x7f5e12e9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100ce00, p=0x7f5e12e9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100ce00, p=p@entry=0x7f5e12e9fe00, slot=slot@entry=0x7f5fa17deec0) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e12e9fe00, s=0x7f5fa17deec0, tv=0x7f5fa100ce00) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5e13be3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100ce00, data=0x7f5e13be3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100ce00) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e147ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 20 (Thread 0x7f5e04fff700 (LWP 193)): #0 0x00007f5fcc52be51 in arena_chunk_dirty_insert ( rbtree=rbtree@entry=0x7f5fc80f5190, node=node@entry=0x7f5732400000) at src/arena.c:171 #1 0x00007f5fcc52ca98 in arena_avail_insert ( arena=arena@entry=0x7f5fc80f5100, chunk=chunk@entry=0x7f5732400000, pageind=pageind@entry=923, npages=npages@entry=17, maybe_adjac_pred=maybe_adjac_pred@entry=true, maybe_adjac_succ=maybe_adjac_succ@entry=true) at src/arena.c:240 #2 0x00007f5fcc52d596 in arena_run_dalloc (arena=arena@entry=0x7f5fc80f5100, run=, dirty=, dirty@entry=true, cleaned=cleaned@entry=false) at src/arena.c:1215 #3 0x00007f5fcc52f157 in je_arena_dalloc_large_locked ( arena=arena@entry=0x7f5fc80f5100, chunk=chunk@entry=0x7f5732400000, ptr=ptr@entry=0x7f573279b000) at src/arena.c:1971 #4 0x00007f5fcc52f18d in je_arena_dalloc_large (arena=0x7f5fc80f5100, chunk=0x7f5732400000, ptr=0x7f573279b000) at src/arena.c:1979 #5 0x000000000055df15 in PacketPoolGetPacket () at tmqh-packetpool.c:272 #6 0x0000000000447fc9 in PacketGetFromQueueOrAlloc () at decode.c:166 #7 0x00000000004486c8 in PacketDefragPktSetup ( parent=parent@entry=0x7f5e0369fe00, pkt=pkt@entry=0x0, len=len@entry=0, proto=) at decode.c:332 #8 0x000000000044eb35 in Defrag4Reassemble (tv=0xb90, p=0x7f5e0369fe00, tracker=0x7f5fc6d98180) at defrag.c:290 ---Type to continue, or q to quit--- #9 DefragInsertFrag (tv=tv@entry=0x7f5fa100d100, dtv=dtv@entry=0x7f5e043fa080, tracker=tracker@entry=0x7f5fc6d98180, p=p@entry=0x7f5e0369fe00, pq=pq@entry=0x7f5fa2cbd7c0) at defrag.c:781 #10 0x000000000044f4d2 in Defrag (tv=tv@entry=0x7f5fa100d100, dtv=dtv@entry=0x7f5e043fa080, p=p@entry=0x7f5e0369fe00, pq=pq@entry=0x7f5fa2cbd7c0) at defrag.c:947 #11 0x000000000044acbe in DecodeIPV4 (tv=tv@entry=0x7f5fa100d100, dtv=dtv@entry=0x7f5e043fa080, p=p@entry=0x7f5e0369fe00, pkt=pkt@entry=0x7f5a271fb800 "E", len=len@entry=1139, pq=pq@entry=0x7f5fa2cbd7c0) at decode-ipv4.c:536 #12 0x00000000004491fd in DecodeEthernet (tv=tv@entry=0x7f5fa100d100, dtv=dtv@entry=0x7f5e043fa080, p=p@entry=0x7f5e0369fe00, pkt=0x7f5a271fb7f2 "@U9Y\250Z", len=, pq=pq@entry=0x7f5fa2cbd7c0) at decode-ethernet.c:60 #13 0x0000000000536fd4 in DecodeAFP (tv=0x7f5fa100d100, p=0x7f5e0369fe00, data=0x7f5e043fa080, pq=0x7f5fa2cbd7c0, postpq=) at source-af-packet.c:1847 #14 0x0000000000537239 in DecodeAFP (tv=, p=, data=, pq=, postpq=) at source-af-packet.c:1827 #15 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d100, p=p@entry=0x7f5e0369fe00, slot=slot@entry=0x7f5fa2cbd780) at tm-threads.c:132 #16 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5e0369fe00, s=0x7f5fa2cbd780, tv=0x7f5fa100d100) at tm-threads.h:149 #17 AFPReadFromRing (ptv=ptv@entry=0x7f5e043e3140) at source-af-packet.c:874 #18 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d100, data=0x7f5e043e3140, slot=) at source-af-packet.c:1214 #19 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d100) at tm-threads.c:336 #20 0x00007f5fc9727dc5 in start_thread (arg=0x7f5e04fff700) at pthread_create.c:308 #21 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 19 (Thread 0x7f5df57ff700 (LWP 194)): #0 0x0000000000599480 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5731c54130, buf=0x7f5a03519314 "\331\324\006K\354\215\200\311x\272\355A\034\364:\312\062\r\332\021e\300.\251\254\001\327\335\237\060N) at util-mpm-ac.c:1324 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5df3e9fe00, smsg=0x0, det_ctx=0x7f5731c54000, de_ctx=0x7f5fa10ae000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d200, ---Type to continue, or q to quit--- de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731c54000, p=p@entry=0x7f5df3e9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100d200, p=0x7f5df3e9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d200, p=p@entry=0x7f5df3e9fe00, slot=slot@entry=0x7f5fa2cbdf00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5df3e9fe00, s=0x7f5fa2cbdf00, tv=0x7f5fa100d200) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5df4be3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d200, data=0x7f5df4be3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d200) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5df57ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 18 (Thread 0x7f5de5fff700 (LWP 195)): #0 0x0000000000474754 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5de469fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d400, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731c80000, p=p@entry=0x7f5de469fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100d400, p=0x7f5de469fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d400, p=p@entry=0x7f5de469fe00, slot=slot@entry=0x7f5fa2cbe680) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5de469fe00, s=0x7f5fa2cbe680, tv=0x7f5fa100d400) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5de53e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d400, data=0x7f5de53e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d400) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5de5fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 17 (Thread 0x7f5dd67ff700 (LWP 196)): #0 0x000000000059948f in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5731cac130, buf=0x7f59c8131308 "@\275\b\276\234]\212!\302\270\311!\277j\n\257\071\352\067\242\241\026,5S\n\341'\312t\bo\v\265\333!\224}\027qd\227\360\356r\255\\3\236,---Type to continue, or q to quit--- \372\250\306\224\"\020o=d\321\266\266@\226?r\244\301V\203u4D\204\202A}\307#\034\362\331\303\225\002\272\305TQ\342\211\027\247p\303\336\364\276G\005\322) at util-mpm-ac.c:1324 #1 0x0000000000463139 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=24 '\030', p=0x7f5dd4e9fe00, smsg=0x0, det_ctx=0x7f5731cac000, de_ctx=0x7f5fa10ae000) at detect.c:1086 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d500, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731cac000, p=p@entry=0x7f5dd4e9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100d500, p=0x7f5dd4e9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d500, p=p@entry=0x7f5dd4e9fe00, slot=slot@entry=0x7f5fa2cbee00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dd4e9fe00, s=0x7f5fa2cbee00, tv=0x7f5fa100d500) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5dd5be3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d500, data=0x7f5dd5be3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d500) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dd67ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 16 (Thread 0x7f5dc6fff700 (LWP 197)): #0 0x0000000000461dd5 in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d600, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731cd8000, p=p@entry=0x7f5dc569fe00) at detect.c:1516 #1 0x0000000000463272 in Detect (tv=0x7f5fa100d600, p=0x7f5dc569fe00, data=, pq=, postpq=) at detect.c:2031 #2 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d600, p=p@entry=0x7f5dc569fe00, slot=slot@entry=0x7f5fa2cbf580) at tm-threads.c:132 #3 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5dc569fe00, s=0x7f5fa2cbf580, tv=0x7f5fa100d600) at tm-threads.h:149 #4 AFPReadFromRing (ptv=ptv@entry=0x7f5dc63e3140) at source-af-packet.c:874 #5 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d600, data=0x7f5dc63e3140, slot=) at source-af-packet.c:1214 #6 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d600) at tm-threads.c:336 #7 0x00007f5fc9727dc5 in start_thread (arg=0x7f5dc6fff700) at pthread_create.c:308 #8 0x00007f5fc925128d in clone () ---Type to continue, or q to quit--- at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 15 (Thread 0x7f5db77ff700 (LWP 198)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5731d04130, buf=0x7f59803a1944 "$\254FI\022\034$\024\233\006\361\276I\315\264\310\365\310\257d,E\360\374V\223\205\321\240\257U\243\060\337FhJ\304!\311\231r\316k3\026\302P\256\062A\262K\206\v\032,\320%L\001\224+\304-\205\026O\216\264%\270\323\\\251\vp\241\t0\035_\225F\251\202-\212\221`\b0\204\230\242\312&\201\370\021gA\206\270B\205\302\b\374F\r\223\300\251d\216\340\247a\221\236;\234\031\332\237\377\373\260`h", buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=8 '\b', p=0x7f5db5e9fe00, smsg=0x0, det_ctx=0x7f5731d04000, de_ctx=0x7f5fa10ae000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100d900, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731d04000, p=p@entry=0x7f5db5e9fe00) at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100d900, p=0x7f5db5e9fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100d900, p=p@entry=0x7f5db5e9fe00, slot=slot@entry=0x7f5fa2cbfd00) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5db5e9fe00, s=0x7f5fa2cbfd00, tv=0x7f5fa100d900) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5db6be3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100d900, data=0x7f5db6be3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100d900) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5db77ff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 14 (Thread 0x7f5da7fff700 (LWP 199)): #0 0x000000000055db82 in PacketPoolGetPacket () at tmqh-packetpool.c:272 #1 0x0000000000447fc9 in PacketGetFromQueueOrAlloc () at decode.c:166 #2 0x000000000053927c in AFPReadFromRing (ptv=ptv@entry=0x7f5da73e3140) at source-af-packet.c:780 #3 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100da00, data=0x7f5da73e3140, slot=) at source-af-packet.c:1214 #4 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100da00) at tm-threads.c:336 #5 0x00007f5fc9727dc5 in start_thread (arg=0x7f5da7fff700) at pthread_create.c:308 #6 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 ---Type to continue, or q to quit--- Thread 13 (Thread 0x7f5d987ff700 (LWP 200)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d987fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100dd00, data=0x7f5d97be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100dd00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d987ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 12 (Thread 0x7f5d88fff700 (LWP 201)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5d8769fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100de00, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731d84000, p=p@entry=0x7f5d8769fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100de00, p=0x7f5d8769fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100de00, p=p@entry=0x7f5d8769fe00, slot=slot@entry=0x7f5fa2cc1380) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d8769fe00, s=0x7f5fa2cc1380, tv=0x7f5fa100de00) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5d883e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100de00, data=0x7f5d883e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100de00) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d88fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 11 (Thread 0x7f5d797ff700 (LWP 202)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d797fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100df00, data=0x7f5d78be3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100df00) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d797ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 ---Type to continue, or q to quit--- Thread 10 (Thread 0x7f5d69fff700 (LWP 203)): #0 0x0000000000474759 in DetectAddressMatchIPv4 (addrs=, addrs_cnt=, a=a@entry=0x7f5d6869fe14) at detect-engine-address.c:1660 #1 0x00000000004625bc in SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e000, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731de4000, p=p@entry=0x7f5d6869fe00) at detect.c:1623 #2 0x0000000000463272 in Detect (tv=0x7f5fa100e000, p=0x7f5d6869fe00, data=, pq=, postpq=) at detect.c:2031 #3 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e000, p=p@entry=0x7f5d6869fe00, slot=slot@entry=0x7f5fa2e343c0) at tm-threads.c:132 #4 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d6869fe00, s=0x7f5fa2e343c0, tv=0x7f5fa100e000) at tm-threads.h:149 #5 AFPReadFromRing (ptv=ptv@entry=0x7f5d693e3140) at source-af-packet.c:874 #6 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e000, data=0x7f5d693e3140, slot=) at source-af-packet.c:1214 #7 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e000) at tm-threads.c:336 #8 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d69fff700) at pthread_create.c:308 #9 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 9 (Thread 0x7f5d5a7ff700 (LWP 204)): #0 AFPReadFromRing (ptv=ptv@entry=0x7f5d59be3140) at source-af-packet.c:747 #1 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e100, data=0x7f5d59be3140, slot=) at source-af-packet.c:1214 #2 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e100) at tm-threads.c:336 #3 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d5a7ff700) at pthread_create.c:308 #4 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 8 (Thread 0x7f5d4afff700 (LWP 205)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f5731e3c130, buf=0x7f58bcc7abc8 "GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: www.diariodecolima.com\r\nConnection: keep-alive\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.256"..., buflen=) at util-mpm-ac.c:1325 #1 0x0000000000462d46 in DetectMpmPrefilter ( sms_runflags=, has_state=0, alproto=0, flags=4 '\004', p=0x7f5d4969fe00, smsg=0x0, det_ctx=0x7f5731e3c000, de_ctx=0x7f5fa10ae000) at detect.c:1095 #2 SigMatchSignatures (th_v=th_v@entry=0x7f5fa100e200, de_ctx=0x7f5fa10ae000, det_ctx=0x7f5731e3c000, p=p@entry=0x7f5d4969fe00) ---Type to continue, or q to quit--- at detect.c:1462 #3 0x0000000000463272 in Detect (tv=0x7f5fa100e200, p=0x7f5d4969fe00, data=, pq=, postpq=) at detect.c:2031 #4 0x000000000055f96d in TmThreadsSlotVarRun (tv=tv@entry=0x7f5fa100e200, p=p@entry=0x7f5d4969fe00, slot=slot@entry=0x7f5fa2e352c0) at tm-threads.c:132 #5 0x0000000000539460 in TmThreadsSlotProcessPkt (p=0x7f5d4969fe00, s=0x7f5fa2e352c0, tv=0x7f5fa100e200) at tm-threads.h:149 #6 AFPReadFromRing (ptv=ptv@entry=0x7f5d4a3e3140) at source-af-packet.c:874 #7 0x000000000053c3fd in ReceiveAFPLoop (tv=0x7f5fa100e200, data=0x7f5d4a3e3140, slot=) at source-af-packet.c:1214 #8 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e200) at tm-threads.c:336 #9 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d4afff700) at pthread_create.c:308 #10 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 7 (Thread 0x7f5d3b7ff700 (LWP 206)): #0 0x00007f5fc9246c3d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000053c103 in poll (__timeout=100, __nfds=1, __fds=0x7f5d3b7fdbc0) at /usr/include/bits/poll2.h:46 #2 ReceiveAFPLoop (tv=0x7f5fa100e300, data=0x7f5d3abe3140, slot=) at source-af-packet.c:1186 #3 0x00000000005623b2 in TmThreadsSlotPktAcqLoop (td=0x7f5fa100e300) at tm-threads.c:336 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d3b7ff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 6 (Thread 0x7f5d2bfff700 (LWP 207)): #0 0x00007f5fc92489b3 in select () at ../sysdeps/unix/syscall-template.S:81 #1 0x000000000056728a in UnixMain (this=this@entry=0x85b9a0 ) at unix-manager.c:520 #2 0x00000000005674e2 in UnixManager (th_v=0x7f5fa100e400, thread_data=) at unix-manager.c:910 #3 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e400) at tm-threads.c:600 #4 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2bfff700) at pthread_create.c:308 #5 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 5 (Thread 0x7f5d2afff700 (LWP 208)): #0 je_arena_dalloc_bin_locked (arena=arena@entry=0x7f5fc80e2f00, chunk=chunk@entry=0x7f578f000000, ptr=ptr@entry=0x7f578f34df40, mapelm=) at src/arena.c:1886 #1 0x00007f5fcc547881 in je_tcache_bin_flush_small ( ---Type to continue, or q to quit--- tbin=tbin@entry=0x7f5d2a0061c8, binind=binind@entry=13, rem=63, tcache=tcache@entry=0x7f5d2a006000) at src/tcache.c:127 #2 0x00007f5fcc525640 in je_tcache_dalloc_small (binind=13, ptr=0x7f578302d440, tcache=0x7f5d2a006000) at include/jemalloc/internal/tcache.h:402 #3 je_arena_dalloc (try_tcache=true, ptr=0x7f578302d440, chunk=, arena=0x7f5fc8110400) at include/jemalloc/internal/arena.h:1044 #4 je_idalloct (try_tcache=true, ptr=0x7f578302d440) at include/jemalloc/internal/jemalloc_internal.h:898 #5 je_iqalloct (try_tcache=true, ptr=0x7f578302d440) at include/jemalloc/internal/jemalloc_internal.h:917 #6 je_iqalloc (ptr=0x7f578302d440) at include/jemalloc/internal/jemalloc_internal.h:924 #7 ifree (ptr=0x7f578302d440) at src/jemalloc.c:1233 #8 free (ptr=0x7f578302d440) at src/jemalloc.c:1308 #9 0x00000000004e95a7 in FlowFree (f=0x7f578302d440) at flow-util.c:80 #10 0x00000000004e2003 in FlowUpdateSpareFlows () at flow.c:143 #11 0x00000000004e6b2c in FlowManager (th_v=0x7f5fa100e500, thread_data=0x7f5d2a00e040) at flow-manager.c:616 #12 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e500) at tm-threads.c:600 #13 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d2afff700) at pthread_create.c:308 #14 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 4 (Thread 0x7f5d293ff700 (LWP 209)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x00000000004e5c3f in FlowRecycler (th_v=0x7f5fa100e600, thread_data=0x7f5d2840e058) at flow-manager.c:844 #2 0x0000000000560580 in TmThreadsManagement (td=0x7f5fa100e600) at tm-threads.c:600 #3 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d293ff700) at pthread_create.c:308 #4 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 3 (Thread 0x7f5d283ff700 (LWP 210)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x0000000000444e1f in StatsWakeupThread (arg=0x7f5fa100e700) at counters.c:435 #2 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d283ff700) at pthread_create.c:308 #3 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 2 (Thread 0x7f5d27bfe700 (LWP 211)): ---Type to continue, or q to quit--- #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x0000000000445c7f in StatsMgmtThread (arg=0x7f5fa100e800) at counters.c:359 #2 0x00007f5fc9727dc5 in start_thread (arg=0x7f5d27bfe700) at pthread_create.c:308 #3 0x00007f5fc925128d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 1 (Thread 0x7f5fcc962940 (LWP 1)): #0 0x00007f5fc921849d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 #1 0x00007f5fc92490d4 in usleep (useconds=useconds@entry=1000) at ../sysdeps/unix/sysv/linux/usleep.c:32 #2 0x000000000048100d in DetectEngineReloadThreads ( new_de_ctx=new_de_ctx@entry=0x7f5fa10ae000) at detect-engine.c:704 #3 0x00000000004846b9 in DetectEngineReload (filename=, suri=suri@entry=0x7fff4516d190) at detect-engine.c:2559 #4 0x0000000000410dc4 in main (argc=, argv=) at suricata.c:2439 (gdb)