Starting program: /usr/bin/suricata -c /etc/suricata/suricata.yaml --af-packet -vv [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". [New Thread 0x7f23a3e13700 (LWP 17948)] [New Thread 0x7f23a3612700 (LWP 17971)] [New Thread 0x7f23a2e11700 (LWP 17978)] [New Thread 0x7f23a2610700 (LWP 17981)] [New Thread 0x7f23a1e0f700 (LWP 17984)] [New Thread 0x7f23a160e700 (LWP 17987)] [New Thread 0x7f23a0e0d700 (LWP 18014)] [New Thread 0x7f2333fff700 (LWP 18017)] [New Thread 0x7f23337fe700 (LWP 18020)] [New Thread 0x7f2332ffd700 (LWP 18025)] [New Thread 0x7f23327fc700 (LWP 18048)] [New Thread 0x7f2331ffb700 (LWP 18055)] [New Thread 0x7f23317fa700 (LWP 18058)] [New Thread 0x7f2330ff9700 (LWP 18061)] [New Thread 0x7f22bffff700 (LWP 18084)] [New Thread 0x7f22bf7fe700 (LWP 18091)] [New Thread 0x7f22beffd700 (LWP 18095)] [New Thread 0x7f22be7fc700 (LWP 18099)] [New Thread 0x7f22bdffb700 (LWP 18100)] [New Thread 0x7f22bd7fa700 (LWP 18101)] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7f23a2610700 (LWP 17981)] 0x000000000060011e in LuaPushStringBuffer (luastate=0x5f2e3378, input=0x7f210f804010 "UnityWeb", input_len=8371474) at util-lua.c:264 264 memset(buf, 0x00, buflen); Thread 21 (Thread 0x7f22bd7fa700 (LWP 18101)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x0000000000453da0 in StatsMgmtThread (arg=0x36ce95b0) at counters.c:376 #2 0x00007f23e9349182 in start_thread (arg=0x7f22bd7fa700) at pthread_create.c:312 #3 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 20 (Thread 0x7f22bdffb700 (LWP 18100)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x000000000045436a in StatsWakeupThread (arg=0x36ce92b0) at counters.c:454 #2 0x00007f23e9349182 in start_thread (arg=0x7f22bdffb700) at pthread_create.c:312 #3 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 19 (Thread 0x7f22be7fc700 (LWP 18099)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238 #1 0x000000000052981d in FlowRecycler (th_v=0x36ce8f00, thread_data=0x7f22880008c0) at flow-manager.c:844 #2 0x00000000005cb288 in TmThreadsManagement (td=0x36ce8f00) at tm-threads.c:602 #3 0x00007f23e9349182 in start_thread (arg=0x7f22be7fc700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 18 (Thread 0x7f22beffd700 (LWP 18095)): #0 0x00000000005c6842 in PacketPoolIsEmpty (pool=0x7f22beffd540) at tmqh-packetpool.c:142 #1 0x00000000005c68df in PacketPoolWait () at tmqh-packetpool.c:160 #2 0x00000000005c690d in PacketPoolWaitForN (n=9) at tmqh-packetpool.c:180 #3 0x0000000000528096 in FlowTimeoutHash (ts=0x7f22beffbc60, try_cnt=0, hash_min=0, hash_max=10485760, counters=0x7f22beffbc80) at flow-manager.c:386 #4 0x0000000000528a14 in FlowManager (th_v=0x36ce8b30, thread_data=0x7f22980008e0) at flow-manager.c:620 #5 0x00000000005cb288 in TmThreadsManagement (td=0x36ce8b30) at tm-threads.c:602 #6 0x00007f23e9349182 in start_thread (arg=0x7f22beffd700) at pthread_create.c:312 #7 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 17 (Thread 0x7f22bf7fe700 (LWP 18091)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce7d00, data=0x7f22abfffe80, slot=0x36ce7e30) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce7d00) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f22bf7fe700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 16 (Thread 0x7f22bffff700 (LWP 18084)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce6f30, data=0x7f22b7fffe80, slot=0x36ce7060) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce6f30) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f22bffff700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 15 (Thread 0x7f2330ff9700 (LWP 18061)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce6160, data=0x7f22cffffe80, slot=0x36ce6290) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce6160) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f2330ff9700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 14 (Thread 0x7f23317fa700 (LWP 18058)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce5390, data=0x7f22dffffe80, slot=0x36ce54c0) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce5390) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23317fa700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 13 (Thread 0x7f2331ffb700 (LWP 18055)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce45c0, data=0x7f22effffe80, slot=0x36ce46f0) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce45c0) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f2331ffb700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 12 (Thread 0x7f23327fc700 (LWP 18048)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce37f0, data=0x7f22fffffe80, slot=0x36ce3920) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce37f0) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23327fc700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 11 (Thread 0x7f2332ffd700 (LWP 18025)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce2a20, data=0x7f230ffffe80, slot=0x36ce2b50) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce2a20) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f2332ffd700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 10 (Thread 0x7f23337fe700 (LWP 18020)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce1c70, data=0x7f231ffffe80, slot=0x36ce1d80) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce1c70) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23337fe700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 9 (Thread 0x7f2333fff700 (LWP 18017)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce0e80, data=0x7f232bfffe80, slot=0x36ce0fb0) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce0e80) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f2333fff700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 8 (Thread 0x7f23a0e0d700 (LWP 18014)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36ce00b0, data=0x7f2343fffe80, slot=0x36ce01e0) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36ce00b0) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23a0e0d700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 7 (Thread 0x7f23a160e700 (LWP 17987)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdf2e0, data=0x7f2353fffe80, slot=0x36cdf410) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdf2e0) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23a160e700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 6 (Thread 0x7f23a1e0f700 (LWP 17984)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cde510, data=0x7f2363fffe80, slot=0x36cde640) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cde510) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23a1e0f700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 5 (Thread 0x7f23a2610700 (LWP 17981)): #0 0x000000000060011e in LuaPushStringBuffer (luastate=0x5f2e3378, input=0x7f210f804010 "UnityWeb", input_len=8371474) at util-lua.c:264 #1 0x00000000004f4eb9 in DetectLuaMatchBuffer (det_ctx=0x7f212562dad0, s=0x3cc5fcc0, sm=0x3cc60b30, buffer=0x7f210f804010 "UnityWeb", buffer_len=8371474, offset=75, f=0x35aaa410, flow_lock=0) at detect-lua.c:325 #2 0x00000000004acc98 in DetectEngineContentInspection (de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, s=0x3cc5fcc0, sm=0x3cc60b30, f=0x35aaa410, buffer=0x7f210f804010 "UnityWeb", buffer_len=8371474, stream_start_offset=0, inspection_mode=9 '\t', data=0x0) at detect-engine-content-inspection.c:547 #3 0x00000000004acd95 in DetectEngineContentInspection (de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, s=0x3cc5fcc0, sm=0x3cc60ac0, f=0x35aaa410, buffer=0x7f210f804010 "UnityWeb", buffer_len=8371474, stream_start_offset=0, inspection_mode=9 '\t', data=0x0) at detect-engine-content-inspection.c:582 #4 0x00000000004b457f in DetectEngineInspectHttpServerBody (tv=0x36cdd740, de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, s=0x3cc5fcc0, f=0x35aaa410, flags=8 '\b', alstate=0x7f22d9e27a40, tx=0x7f22d9e24060, tx_id=77) at detect-engine-hsbd.c:361 #5 0x00000000004cf1d8 in DeStateDetectStartDetection (tv=0x36cdd740, de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, s=0x3cc5fcc0, p=0x7f235dcff5e0, f=0x35aaa410, flags=8 '\b', alproto=1, alversion=7 '\a') at detect-engine-state.c:528 #6 0x000000000047f349 in SigMatchSignatures (th_v=0x36cdd740, de_ctx=0x36ce98b0, det_ctx=0x7f212562dad0, p=0x7f235dcff5e0) at detect.c:1764 #7 0x000000000047fc48 in Detect (tv=0x36cdd740, p=0x7f235dcff5e0, data=0x7f212562dad0, pq=0x36cddc70, postpq=0x0) at detect.c:2033 #8 0x00000000005c9b4b in TmThreadsSlotVarRun (tv=0x36cdd740, p=0x7f235dcff5e0, slot=0x36cdd9b0) at tm-threads.c:134 #9 0x000000000058fa40 in TmThreadsSlotProcessPkt (tv=0x36cdd740, s=0x36cdd9b0, p=0x7f235dcff5e0) at tm-threads.h:150 #10 0x0000000000591958 in AFPReadFromRing (ptv=0x7f2373fffe80) at source-af-packet.c:875 #11 0x0000000000592cd5 in ReceiveAFPLoop (tv=0x36cdd740, data=0x7f2373fffe80, slot=0x36cdd870) at source-af-packet.c:1215 #12 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdd740) at tm-threads.c:338 #13 0x00007f23e9349182 in start_thread (arg=0x7f23a2610700) at pthread_create.c:312 #14 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 4 (Thread 0x7f23a2e11700 (LWP 17978)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdc970, data=0x7f2383fffe80, slot=0x36cdcaa0) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdc970) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23a2e11700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 3 (Thread 0x7f23a3612700 (LWP 17971)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdbba0, data=0x7f2393fffe80, slot=0x36cdbcd0) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdbba0) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23a3612700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 2 (Thread 0x7f23a3e13700 (LWP 17948)): #0 0x00007f23e7fc212d in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x0000000000592a21 in ReceiveAFPLoop (tv=0x36cdaae0, data=0x7f239ffffe80, slot=0x36cdaf00) at source-af-packet.c:1187 #2 0x00000000005ca45f in TmThreadsSlotPktAcqLoop (td=0x36cdaae0) at tm-threads.c:338 #3 0x00007f23e9349182 in start_thread (arg=0x7f23a3e13700) at pthread_create.c:312 #4 0x00007f23e7fcf47d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 1 (Thread 0x7f23eacb8940 (LWP 17740)): #0 0x00007f23e7f95f3d in nanosleep () at ../sysdeps/unix/syscall-template.S:81 #1 0x00007f23e7fc74a4 in usleep (useconds=) at ../sysdeps/unix/sysv/linux/usleep.c:32 #2 0x00000000005c4220 in main (argc=5, argv=0x7ffcb81cf368) at suricata.c:2501 A debugging session is active. Inferior 1 [process 17740] will be killed. Quit anyway? (y or n)