Thread 11 (Thread 0x7feba9abc700 (LWP 10425)): #0 0x00007febd69c7a82 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00000000004f5214 in FlowManager (th_v=0x289ebb0, thread_data=0x7feb2c0008c0) at flow-manager.c:778 #2 0x000000000056a5d9 in TmThreadsManagement (td=0x289ebb0) at tm-threads.c:709 #3 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #4 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 10 (Thread 0x7febbdabc700 (LWP 10422)): #0 0x00000000004a8100 in IPOnlyMatchPacket (tv=tv@entry=0x289d260, de_ctx=de_ctx@entry=0x2878a70, det_ctx=det_ctx@entry=0x7feb65b95980, io_ctx=io_ctx@entry=0x2879b20, io_tctx=io_tctx@entry=0x7feb65b95ae0, p=p@entry=0x7feb659bb830) at detect-engine-iponly.c:1011 #1 0x0000000000481547 in SigMatchSignatures (th_v=th_v@entry=0x289d260, de_ctx=0x2878a70, det_ctx=det_ctx@entry=0x7feb65b95980, p=p@entry=0x7feb659bb830) at detect.c:1201 #2 0x0000000000482363 in DetectNoFlow (p=0x7feb659bb830, det_ctx=0x7feb65b95980, de_ctx=, tv=0x289d260) at detect.c:1679 #3 Detect (tv=tv@entry=0x289d260, p=p@entry=0x7feb659bb830, data=data@entry=0x7feb65b95980, pq=pq@entry=0x0, postpq=postpq@entry=0x0) at detect.c:1741 #4 0x00000000004f87dd in FlowWorker (tv=0x289d260, p=0x7feb659bb830, data=0x7feb659bf420, preq=0x289d630, unused=) at flow-worker.c:232 #5 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289d260, p=p@entry=0x7feb659bb830, slot=slot@entry=0x289d4b0) at tm-threads.c:130 #6 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feb659bb830, s=0x289d4b0, tv=0x289d260) at tm-threads.h:149 #7 ReceivePfringLoop (tv=0x289d260, data=0x7feb6bfffed0, slot=) at source-pfring.c:366 #8 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289d260) at tm-threads.c:334 #9 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #10 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 9 (Thread 0x7febd16fa700 (LWP 10420)): #0 0x0000000000598700 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=, buf=0x7feb837e7666
, buflen=) at util-mpm-ac.c:1074 #1 0x00000000004b0746 in Prefilter (det_ctx=det_ctx@entry=0x7feb8db95980, sgh=0x4ecb260, p=p@entry=0x7feb8d9bb830, flags=flags@entry=24 '\030', has_state=has_state@entry=0) at detect-engine-prefilter.c:174 #2 0x000000000048118b in SigMatchSignatures (th_v=th_v@entry=0x289c180, de_ctx=0x2878a70, det_ctx=det_ctx@entry=0x7feb8db95980, p=p@entry=0x7feb8d9bb830) at detect.c:1250 #3 0x000000000048222c in DetectFlow (p=0x7feb8d9bb830, det_ctx=0x7feb8db95980, de_ctx=, tv=0x289c180) at detect.c:1663 #4 Detect (tv=tv@entry=0x289c180, p=p@entry=0x7feb8d9bb830, data=data@entry=0x7feb8db95980, pq=pq@entry=0x0, postpq=postpq@entry=0x0) at detect.c:1738 #5 0x00000000004f87dd in FlowWorker (tv=0x289c180, p=0x7feb8d9bb830, data=0x7feb8d9bf420, preq=0x289c550, unused=) at flow-worker.c:232 #6 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289c180, p=p@entry=0x7feb8d9bb830, slot=slot@entry=0x289c3d0) at tm-threads.c:130 #7 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feb8d9bb830, s=0x289c3d0, tv=0x289c180) at tm-threads.h:149 #8 ReceivePfringLoop (tv=0x289c180, data=0x7feb93fffed0, slot=) at source-pfring.c:366 #9 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289c180) at tm-threads.c:334 #10 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #11 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 8 (Thread 0x7febd0ef9700 (LWP 10421)): #0 0x000000000045e805 in SSLGetTxCnt (state=0x7feb7ba9cca0) at app-layer-ssl.c:196 #1 0x0000000000454d6d in AppLayerParserGetTxCnt (alstate=0x0, alproto=4, ipproto=) at app-layer-parser.c:826 #2 AppLayerParserParse (tv=tv@entry=0x289c9f0, alp_tctx=, f=0x7feaddc17bc0, alproto=4, flags=flags@entry=6 '\006', input=0x0, input_len=0) at app-layer-parser.c:985 #3 0x000000000041624e in AppLayerHandleTCPData (tv=tv@entry=0x289c9f0, ra_ctx=ra_ctx@entry=0x7feb799c0260, p=0x0, p@entry=0x7feb799bb830, f=, ssn=ssn@entry=0x7feb7a8fac30, stream=stream@entry=0x7feb7a8fac88, data=, data@entry=0x0, data_len=data_len@entry=0, flags=6 '\006') at app-layer.c:610 #4 0x000000000055f863 in StreamTcpReassembleAppLayer (tv=tv@entry=0x289c9f0, ra_ctx=ra_ctx@entry=0x7feb799c0260, ssn=ssn@entry=0x7feb7a8fac30, stream=stream@entry=0x7feb7a8fac88, p=p@entry=0x7feb799bb830) at stream-tcp-reassemble.c:2959 #5 0x000000000055fdd1 in StreamTcpReassembleHandleSegmentUpdateACK (tv=tv@entry=0x289c9f0, ra_ctx=ra_ctx@entry=0x7feb799c0260, ssn=ssn@entry=0x7feb7a8fac30, stream=stream@entry=0x7feb7a8fac88, p=p@entry=0x7feb799bb830) at stream-tcp-reassemble.c:3406 #6 0x0000000000561780 in StreamTcpReassembleHandleSegment (tv=tv@entry=0x289c9f0, ra_ctx=0x7feb799c0260, ssn=ssn@entry=0x7feb7a8fac30, stream=0x7feb7a8fac40, p=p@entry=0x7feb799bb830, pq=pq@entry=0x7feb799bff88) at stream-tcp-reassemble.c:3434 #7 0x000000000055bdc3 in StreamTcpPacketStateTimeWait (pq=0x7feb799bff88, ssn=0x7feb7a8fac30, stt=0x7feb799bff80, p=0x7feb799bb830, tv=0x289c9f0) at stream-tcp.c:4137 #8 StreamTcpPacket (tv=0x289c9f0, p=0x7feb799bb830, stt=0x7feb799bff80, pq=0x7feb799bf440) at stream-tcp.c:4585 #9 0x000000000055c5ba in StreamTcp (tv=tv@entry=0x289c9f0, p=p@entry=0x7feb799bb830, data=, pq=pq@entry=0x7feb799bf440, postpq=postpq@entry=0x0) at stream-tcp.c:4918 #10 0x00000000004f8779 in FlowWorker (tv=0x289c9f0, p=0x7feb799bb830, data=0x7feb799bf420, preq=0x289cdc0, unused=) at flow-worker.c:194 #11 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289c9f0, p=p@entry=0x7feb799bb830, slot=slot@entry=0x289cc40) at tm-threads.c:130 #12 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feb799bb830, s=0x289cc40, tv=0x289c9f0) at tm-threads.h:149 #13 ReceivePfringLoop (tv=0x289c9f0, data=0x7feb7ffffed0, slot=) at source-pfring.c:366 #14 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289c9f0) at tm-threads.c:334 #15 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #16 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 7 (Thread 0x7febd1efb700 (LWP 10419)): #0 0x0000000000481019 in DetectPrefilterSetNonPrefilterList (p=0x7feba19bb830, p=0x7feba19bb830, det_ctx=0x7feba1b95980) at detect.c:937 #1 SigMatchSignatures (th_v=th_v@entry=0x289b910, de_ctx=0x2878a70, det_ctx=det_ctx@entry=0x7feba1b95980, p=p@entry=0x7feba19bb830) at detect.c:1217 #2 0x000000000048222c in DetectFlow (p=0x7feba19bb830, det_ctx=0x7feba1b95980, de_ctx=, tv=0x289b910) at detect.c:1663 #3 Detect (tv=tv@entry=0x289b910, p=p@entry=0x7feba19bb830, data=data@entry=0x7feba1b95980, pq=pq@entry=0x0, postpq=postpq@entry=0x0) at detect.c:1738 #4 0x00000000004f87dd in FlowWorker (tv=0x289b910, p=0x7feba19bb830, data=0x7feba19bf420, preq=0x289bce0, unused=) at flow-worker.c:232 #5 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289b910, p=p@entry=0x7feba19bb830, slot=slot@entry=0x289bb60) at tm-threads.c:130 #6 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feba19bb830, s=0x289bb60, tv=0x289b910) at tm-threads.h:149 #7 ReceivePfringLoop (tv=0x289b910, data=0x7feba7fffed0, slot=) at source-pfring.c:366 #8 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289b910) at tm-threads.c:334 #9 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #10 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 6 (Thread 0x7feba92bb700 (LWP 10426)): #0 0x00007febd69c7a82 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00000000004f49a7 in FlowRecycler (th_v=0x289f060, thread_data=0x7feb1c0008c0) at flow-manager.c:940 #2 0x000000000056a5d9 in TmThreadsManagement (td=0x289f060) at tm-threads.c:709 #3 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #4 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 5 (Thread 0x7febd26fc700 (LWP 10418)): #0 0x0000000000598715 in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=, buf=0x7febade03dee
, buflen=) at util-mpm-ac.c:1048 #1 0x00000000004b0746 in Prefilter (det_ctx=det_ctx@entry=0x7febb5b95980, sgh=0x4ecb260, p=p@entry=0x7febb59bb830, flags=flags@entry=24 '\030', has_state=has_state@entry=1) at detect-engine-prefilter.c:174 #2 0x000000000048118b in SigMatchSignatures (th_v=th_v@entry=0x289b0a0, de_ctx=0x2878a70, det_ctx=det_ctx@entry=0x7febb5b95980, p=p@entry=0x7febb59bb830) at detect.c:1250 #3 0x000000000048222c in DetectFlow (p=0x7febb59bb830, det_ctx=0x7febb5b95980, de_ctx=, tv=0x289b0a0) at detect.c:1663 #4 Detect (tv=tv@entry=0x289b0a0, p=p@entry=0x7febb59bb830, data=data@entry=0x7febb5b95980, pq=pq@entry=0x0, postpq=postpq@entry=0x0) at detect.c:1738 #5 0x00000000004f87dd in FlowWorker (tv=0x289b0a0, p=0x7febb59bb830, data=0x7febb59bf420, preq=0x289b470, unused=) at flow-worker.c:232 #6 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289b0a0, p=p@entry=0x7febb59bb830, slot=slot@entry=0x289b2f0) at tm-threads.c:130 #7 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7febb59bb830, s=0x289b2f0, tv=0x289b0a0) at tm-threads.h:149 #8 ReceivePfringLoop (tv=0x289b0a0, data=0x7febbbfffed0, slot=) at source-pfring.c:366 #9 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289b0a0) at tm-threads.c:334 #10 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #11 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 4 (Thread 0x7febbd2bb700 (LWP 10423)): #0 FlowCompare (p=0x7feb519bb830, f=0x7feb2b78ad90) at flow-hash.c:307 #1 FlowGetFlowFromHash (tv=tv@entry=0x289dad0, dtv=0x7feb519bf4c0, p=p@entry=0x7feb519bb830, dest=dest@entry=0x7feb519bb868) at flow-hash.c:533 #2 0x00000000004f18ad in FlowHandlePacket (tv=tv@entry=0x289dad0, dtv=, p=p@entry=0x7feb519bb830) at flow.c:306 #3 0x00000000004f885f in FlowWorker (tv=0x289dad0, p=0x7feb519bb830, data=0x7feb519bf420, preq=0x289dea0, unused=) at flow-worker.c:168 #4 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289dad0, p=p@entry=0x7feb519bb830, slot=slot@entry=0x289dd20) at tm-threads.c:130 #5 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feb519bb830, s=0x289dd20, tv=0x289dad0) at tm-threads.h:149 #6 ReceivePfringLoop (tv=0x289dad0, data=0x7feb57fffed0, slot=) at source-pfring.c:366 #7 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289dad0) at tm-threads.c:334 #8 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #9 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 3 (Thread 0x7febd8fd6900 (LWP 10416)): #0 0x00007febd64b566d in nanosleep () from /lib64/libc.so.6 #1 0x00007febd64e62c4 in usleep () from /lib64/libc.so.6 #2 0x000000000040ebdd in main (argc=, argv=) at suricata.c:2666 Thread 2 (Thread 0x7febd2efd700 (LWP 10417)): #0 0x00007febd64807a5 in __memset_sse2 () from /lib64/libc.so.6 #1 0x00000000004818e1 in SigMatchSignatures (th_v=th_v@entry=0x289a320, de_ctx=0x2878a70, det_ctx=det_ctx@entry=0x7febc9b959e0, p=p@entry=0x7febc99bb830) at detect.c:1222 #2 0x000000000048222c in DetectFlow (p=0x7febc99bb830, det_ctx=0x7febc9b959e0, de_ctx=, tv=0x289a320) at detect.c:1663 #3 Detect (tv=tv@entry=0x289a320, p=p@entry=0x7febc99bb830, data=data@entry=0x7febc9b959e0, pq=pq@entry=0x0, postpq=postpq@entry=0x0) at detect.c:1738 #4 0x00000000004f87dd in FlowWorker (tv=0x289a320, p=0x7febc99bb830, data=0x7febc99bf420, preq=0x289ac00, unused=) at flow-worker.c:232 #5 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289a320, p=p@entry=0x7febc99bb830, slot=slot@entry=0x289aa80) at tm-threads.c:130 #6 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7febc99bb830, s=0x289aa80, tv=0x289a320) at tm-threads.h:149 #7 ReceivePfringLoop (tv=0x289a320, data=0x7febcffffed0, slot=) at source-pfring.c:366 #8 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289a320) at tm-threads.c:334 #9 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #10 0x00007febd64ee73d in clone () from /lib64/libc.so.6 Thread 1 (Thread 0x7febbcaba700 (LWP 10424)): #0 0x00007febd6540f8e in __memcpy_ssse3_back () from /lib64/libc.so.6 #1 0x000000000041837a in StubDataParser (dcerpc=dcerpc@entry=0x7feb3fddf7b8, input=input@entry=0x7feb04a9f5d0 "", input_len=input_len@entry=1024) at app-layer-dcerpc.c:1236 #2 0x0000000000419644 in DCERPCParser (dcerpc=dcerpc@entry=0x7feb3fddf7b8, input=0x7feb04a9f5d0 "", input_len=input_len@entry=1024) at app-layer-dcerpc.c:1796 #3 0x0000000000456bae in DataParser (pstate=, input_len=1024, input=, smb_state=0x7feb3fddf740) at app-layer-smb.c:673 #4 SMBParseByteCount (f=, pstate=, input_len=1024, input=0x7feb04a9f5cf "\001", smb_state=0x7feb3fddf740) at app-layer-smb.c:833 #5 SMBParse (smb_state=0x7feb3fddf740, pstate=, input=0x7feb04a9f590 "", input_len=1025, dir=, local_data=, f=) at app-layer-smb.c:1315 #6 0x0000000000454dc6 in AppLayerParserParse (tv=tv@entry=0x289e340, alp_tctx=, f=0x7feadf11bda0, alproto=9, flags=flags@entry=8 '\b', input=0x7feb04a9f590 "", input_len=1088) at app-layer-parser.c:991 #7 0x000000000041624e in AppLayerHandleTCPData (tv=tv@entry=0x289e340, ra_ctx=ra_ctx@entry=0x7feb3d9c0260, p=0x7feb04a9f590, p@entry=0x7feb3d9bb830, f=, ssn=ssn@entry=0x7feb3f86c9b0, stream=stream@entry=0x7feb3f86c9c0, data=, data_len=1088, flags=8 '\b') at app-layer.c:610 #8 0x000000000055f5cb in DoReassemble (p=0x7feb3d9bb830, rd=0x7febbcab78f0, seg=0x7feb04b38460, stream=0x7feb3f86c9c0, ssn=0x7feb3f86c9b0, ra_ctx=0x7feb3d9c0260, tv=0x289e340) at stream-tcp-reassemble.c:2660 #9 StreamTcpReassembleAppLayer (tv=tv@entry=0x289e340, ra_ctx=ra_ctx@entry=0x7feb3d9c0260, ssn=ssn@entry=0x7feb3f86c9b0, stream=stream@entry=0x7feb3f86c9c0, p=p@entry=0x7feb3d9bb830) at stream-tcp-reassemble.c:3030 #10 0x000000000055fdd1 in StreamTcpReassembleHandleSegmentUpdateACK (tv=tv@entry=0x289e340, ra_ctx=ra_ctx@entry=0x7feb3d9c0260, ssn=ssn@entry=0x7feb3f86c9b0, stream=stream@entry=0x7feb3f86c9c0, p=p@entry=0x7feb3d9bb830) at stream-tcp-reassemble.c:3406 #11 0x0000000000561780 in StreamTcpReassembleHandleSegment (tv=tv@entry=0x289e340, ra_ctx=0x7feb3d9c0260, ssn=ssn@entry=0x7feb3f86c9b0, stream=0x7feb3f86ca08, p=p@entry=0x7feb3d9bb830, pq=pq@entry=0x7feb3d9bff88) at stream-tcp-reassemble.c:3434 #12 0x0000000000557c29 in HandleEstablishedPacketToClient (stt=, pq=, p=, ssn=, tv=) at stream-tcp.c:2232 #13 StreamTcpPacketStateEstablished (tv=tv@entry=0x289e340, p=p@entry=0x7feb3d9bb830, stt=stt@entry=0x7feb3d9bff80, ssn=ssn@entry=0x7feb3f86c9b0, pq=pq@entry=0x7feb3d9bff88) at stream-tcp.c:2476 #14 0x000000000055aef7 in StreamTcpPacket (tv=0x289e340, p=0x7feb3d9bb830, stt=0x7feb3d9bff80, pq=0x7feb3d9bf440) at stream-tcp.c:4555 #15 0x000000000055c5ba in StreamTcp (tv=tv@entry=0x289e340, p=p@entry=0x7feb3d9bb830, data=, pq=pq@entry=0x7feb3d9bf440, postpq=postpq@entry=0x0) at stream-tcp.c:4918 #16 0x00000000004f8779 in FlowWorker (tv=0x289e340, p=0x7feb3d9bb830, data=0x7feb3d9bf420, preq=0x289e710, unused=) at flow-worker.c:194 #17 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289e340, p=p@entry=0x7feb3d9bb830, slot=slot@entry=0x289e590) at tm-threads.c:130 #18 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feb3d9bb830, s=0x289e590, tv=0x289e340) at tm-threads.h:149 #19 ReceivePfringLoop (tv=0x289e340, data=0x7feb43fffed0, slot=) at source-pfring.c:366 #20 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289e340) at tm-threads.c:334 #21 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #22 0x00007febd64ee73d in clone () from /lib64/libc.so.6 bt #0 0x00007febd6540f8e in __memcpy_ssse3_back () from /lib64/libc.so.6 #1 0x000000000041837a in StubDataParser (dcerpc=dcerpc@entry=0x7feb3fddf7b8, input=input@entry=0x7feb04a9f5d0 "", input_len=input_len@entry=1024) at app-layer-dcerpc.c:1236 #2 0x0000000000419644 in DCERPCParser (dcerpc=dcerpc@entry=0x7feb3fddf7b8, input=0x7feb04a9f5d0 "", input_len=input_len@entry=1024) at app-layer-dcerpc.c:1796 #3 0x0000000000456bae in DataParser (pstate=, input_len=1024, input=, smb_state=0x7feb3fddf740) at app-layer-smb.c:673 #4 SMBParseByteCount (f=, pstate=, input_len=1024, input=0x7feb04a9f5cf "\001", smb_state=0x7feb3fddf740) at app-layer-smb.c:833 #5 SMBParse (smb_state=0x7feb3fddf740, pstate=, input=0x7feb04a9f590 "", input_len=1025, dir=, local_data=, f=) at app-layer-smb.c:1315 #6 0x0000000000454dc6 in AppLayerParserParse (tv=tv@entry=0x289e340, alp_tctx=, f=0x7feadf11bda0, alproto=9, flags=flags@entry=8 '\b', input=0x7feb04a9f590 "", input_len=1088) at app-layer-parser.c:991 #7 0x000000000041624e in AppLayerHandleTCPData (tv=tv@entry=0x289e340, ra_ctx=ra_ctx@entry=0x7feb3d9c0260, p=0x7feb04a9f590, p@entry=0x7feb3d9bb830, f=, ssn=ssn@entry=0x7feb3f86c9b0, stream=stream@entry=0x7feb3f86c9c0, data=, data_len=1088, flags=8 '\b') at app-layer.c:610 #8 0x000000000055f5cb in DoReassemble (p=0x7feb3d9bb830, rd=0x7febbcab78f0, seg=0x7feb04b38460, stream=0x7feb3f86c9c0, ssn=0x7feb3f86c9b0, ra_ctx=0x7feb3d9c0260, tv=0x289e340) at stream-tcp-reassemble.c:2660 #9 StreamTcpReassembleAppLayer (tv=tv@entry=0x289e340, ra_ctx=ra_ctx@entry=0x7feb3d9c0260, ssn=ssn@entry=0x7feb3f86c9b0, stream=stream@entry=0x7feb3f86c9c0, p=p@entry=0x7feb3d9bb830) at stream-tcp-reassemble.c:3030 #10 0x000000000055fdd1 in StreamTcpReassembleHandleSegmentUpdateACK (tv=tv@entry=0x289e340, ra_ctx=ra_ctx@entry=0x7feb3d9c0260, ssn=ssn@entry=0x7feb3f86c9b0, stream=stream@entry=0x7feb3f86c9c0, p=p@entry=0x7feb3d9bb830) at stream-tcp-reassemble.c:3406 #11 0x0000000000561780 in StreamTcpReassembleHandleSegment (tv=tv@entry=0x289e340, ra_ctx=0x7feb3d9c0260, ssn=ssn@entry=0x7feb3f86c9b0, stream=0x7feb3f86ca08, p=p@entry=0x7feb3d9bb830, pq=pq@entry=0x7feb3d9bff88) at stream-tcp-reassemble.c:3434 #12 0x0000000000557c29 in HandleEstablishedPacketToClient (stt=, pq=, p=, ssn=, tv=) at stream-tcp.c:2232 #13 StreamTcpPacketStateEstablished (tv=tv@entry=0x289e340, p=p@entry=0x7feb3d9bb830, stt=stt@entry=0x7feb3d9bff80, ssn=ssn@entry=0x7feb3f86c9b0, pq=pq@entry=0x7feb3d9bff88) at stream-tcp.c:2476 #14 0x000000000055aef7 in StreamTcpPacket (tv=0x289e340, p=0x7feb3d9bb830, stt=0x7feb3d9bff80, pq=0x7feb3d9bf440) at stream-tcp.c:4555 #15 0x000000000055c5ba in StreamTcp (tv=tv@entry=0x289e340, p=p@entry=0x7feb3d9bb830, data=, pq=pq@entry=0x7feb3d9bf440, postpq=postpq@entry=0x0) at stream-tcp.c:4918 #16 0x00000000004f8779 in FlowWorker (tv=0x289e340, p=0x7feb3d9bb830, data=0x7feb3d9bf420, preq=0x289e710, unused=) at flow-worker.c:194 #17 0x0000000000569aad in TmThreadsSlotVarRun (tv=tv@entry=0x289e340, p=p@entry=0x7feb3d9bb830, slot=slot@entry=0x289e590) at tm-threads.c:130 #18 0x00000000005527f6 in TmThreadsSlotProcessPkt (p=0x7feb3d9bb830, s=0x289e590, tv=0x289e340) at tm-threads.h:149 #19 ReceivePfringLoop (tv=0x289e340, data=0x7feb43fffed0, slot=) at source-pfring.c:366 #20 0x000000000056beca in TmThreadsSlotPktAcqLoop (td=0x289e340) at tm-threads.c:334 #21 0x00007febd69c3dc5 in start_thread () from /lib64/libpthread.so.0 #22 0x00007febd64ee73d in clone () from /lib64/libc.so.6 bt full 2 #0 0x00007febd6540f8e in __memcpy_ssse3_back () from /lib64/libc.so.6 No symbol table info available. #1 0x000000000041837a in StubDataParser (dcerpc=dcerpc@entry=0x7feb3fddf7b8, input=input@entry=0x7feb04a9f5d0 "", input_len=input_len@entry=1024) at app-layer-dcerpc.c:1236 stub_data_buffer = 0x7feb3fddf830 stub_data_buffer_len = 0x7feb3fddf838 stub_data_fresh = 0x7feb3fddf83c "" stub_len = 1024 ptmp = __FUNCTION__ = "StubDataParser" (More stack frames follow...) x/u 0x7feb3fddf838 0x7feb3fddf838: 4294967256