root@suricata:~# suricata --build-info This is Suricata version 4.1.0-dev (rev 83f220a) Features: PCAP_SET_BUFF AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK PCRE_JIT HAVE_NSS HAVE_LUA HAVE_LUAJIT HAVE_LIBJANSSON TLS MAGIC SIMD support: SSE_4_2 SSE_4_1 SSE_3 Atomic intrisics: 1 2 4 8 16 byte(s) 64-bits, Little-endian architecture GCC version 5.4.0 20160609, C version 199901 compiled with _FORTIFY_SOURCE=0 L1 cache line size (CLS)=64 thread local storage method: __thread compiled with LibHTP v0.5.25, linked against LibHTP v0.5.25 Suricata Configuration: AF_PACKET support: yes PF_RING support: no NFQueue support: no NFLOG support: no IPFW support: no Netmap support: no DAG enabled: no Napatech enabled: no Unix socket enabled: yes Detection enabled: yes Libmagic support: yes libnss support: yes libnspr support: yes libjansson support: yes hiredis support: no hiredis async with libevent: no Prelude support: no PCRE jit: yes LUA support: yes, through luajit libluajit: yes libgeoip: yes Non-bundled htp: no Old barnyard2 support: no CUDA enabled: no Hyperscan support: yes Libnet support: yes Rust support (experimental): no Experimental Rust parsers: no Rust strict mode: no Suricatasc install: yes Profiling enabled: no Profiling locks enabled: no Development settings: Coccinelle / spatch: yes Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Generic build parameters: Installation prefix: /usr/local Configuration directory: /usr/local/etc/suricata/ Log directory: /usr/local/var/log/suricata/ --prefix /usr/local --sysconfdir /usr/local/etc --localstatedir /usr/local/var Host: x86_64-pc-linux-gnu Compiler: gcc (exec name) / gcc (real) GCC Protect enabled: no GCC march native enabled: yes GCC Profile enabled: no Position Independent Executable enabled: no CFLAGS -ggdb -O0 -march=native PCAP_CFLAGS -I/usr/include SECCFLAGS root@suricata:~# [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/usr/local/bin/suricata -c /etc/suricata/test-yaml/suricata.yaml --pidfile /va'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x000000000052d689 in GetBufferForTX (tx=0x7f87298e9d30, tx_id=10, de_ctx=0x0, det_ctx=0x7f8729235610, f=0x7f84292008d0, htp_state=0x7f87298df770, flags=36 '$', buffer_len=0x7f87b0ff7004) at detect-http-start.c:115 115 size_t line_size = bstr_len(line) + 2; [Current thread is 1 (Thread 0x7f87b0ff9700 (LWP 16275))] (gdb) thread apply all bt Thread 25 (Thread 0x7f8690ff9700 (LWP 16289)): #0 0x00007f87f9423593 in select () at ../sysdeps/unix/syscall-template.S:84 #1 0x000000000062e729 in UnixMain (this=0x94ad00 ) at unix-manager.c:565 #2 0x0000000000630699 in UnixManager (th_v=0x1f291350, thread_data=0x7f86640008c0) at unix-manager.c:925 #3 0x000000000062642d in TmThreadsManagement (td=0x1f291350) at tm-threads.c:709 #4 0x00007f87faa156ba in start_thread (arg=0x7f8690ff9700) at pthread_create.c:333 #5 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 24 (Thread 0x7f87f1b87700 (LWP 16266)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x241da410, data=0x7f87e7fffd80, slot=0x1d240460) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x241da410) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87f1b87700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 23 (Thread 0x7f86917fa700 (LWP 16288)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225 #1 0x00000000004955fb in StatsMgmtThread (arg=0x1901f9a0) at counters.c:378 #2 0x00007f87faa156ba in start_thread (arg=0x7f86917fa700) at pthread_create.c:333 #3 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 22 (Thread 0x7f8720ff9700 (LWP 16282)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x222246f0, data=0x7f869ffffd80, slot=0x1690c760) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x222246f0) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f8720ff9700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 21 (Thread 0x7f8691ffb700 (LWP 16287)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225 #1 0x0000000000495c15 in StatsWakeupThread (arg=0x19baf720) at counters.c:456 #2 0x00007f87faa156ba in start_thread (arg=0x7f8691ffb700) at pthread_create.c:333 #3 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 20 (Thread 0x7f86927fc700 (LWP 16286)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225 #1 0x00000000005712fb in FlowRecycler (th_v=0x1ae7fd70, thread_data=0x7f866c0008c0) at flow-manager.c:952 #2 0x000000000062642d in TmThreadsManagement (td=0x1ae7fd70) at tm-threads.c:709 #3 0x00007f87faa156ba in start_thread (arg=0x7f86927fc700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 19 (Thread 0x7f8692ffd700 (LWP 16285)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225 #1 0x00000000005712fb in FlowRecycler (th_v=0x22131d20, thread_data=0x7f86780008c0) at flow-manager.c:952 #2 0x000000000062642d in TmThreadsManagement (td=0x22131d20) at tm-threads.c:709 #3 0x00007f87faa156ba in start_thread (arg=0x7f8692ffd700) at pthread_create.c:333 ---Type to continue, or q to quit--- #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 18 (Thread 0x7f86937fe700 (LWP 16284)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225 #1 0x000000000057079a in FlowManager (th_v=0x1b30aa50, thread_data=0x7f867c0008c0) at flow-manager.c:790 #2 0x000000000062642d in TmThreadsManagement (td=0x1b30aa50) at tm-threads.c:709 #3 0x00007f87faa156ba in start_thread (arg=0x7f86937fe700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 17 (Thread 0x7f87b3fff700 (LWP 16269)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x2113b870, data=0x7f87a7fffd80, slot=0x1668bc70) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x2113b870) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87b3fff700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 16 (Thread 0x7f87b1ffb700 (LWP 16273)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x22ccef10, data=0x7f8757fffd80, slot=0x1681e1c0) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x22ccef10) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87b1ffb700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 15 (Thread 0x7f87217fa700 (LWP 16281)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x2246f230, data=0x7f86bbfffd80, slot=0x169ba8c0) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x2246f230) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87217fa700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 14 (Thread 0x7f87b27fc700 (LWP 16272)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x1b4b16b0, data=0x7f8773fffd80, slot=0x16924ae0) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x1b4b16b0) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87b27fc700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 13 (Thread 0x7f8721ffb700 (LWP 16280)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x17f8f4d0, data=0x7f86c7fffd80, slot=0x167ffe40) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x17f8f4d0) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f8721ffb700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 12 (Thread 0x7f8722ffd700 (LWP 16278)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x1e3805c0, data=0x7f86effffd80, slot=0x168f6070) at source-af-packet.c:1452 ---Type to continue, or q to quit--- #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x1e3805c0) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f8722ffd700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 11 (Thread 0x7f87b37fe700 (LWP 16270)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x1b9b9c90, data=0x7f879bfffd80, slot=0x168f5440) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x1b9b9c90) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87b37fe700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 10 (Thread 0x7f87b2ffd700 (LWP 16271)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x20004e90, data=0x7f877ffffd80, slot=0x1694dd40) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x20004e90) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87b2ffd700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 9 (Thread 0x7f87227fc700 (LWP 16279)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x24344d70, data=0x7f86e3fffd80, slot=0x167224d0) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x24344d70) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87227fc700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 8 (Thread 0x7f8693fff700 (LWP 16283)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:225 #1 0x000000000057079a in FlowManager (th_v=0x1bb024c0, thread_data=0x7f868c0008c0) at flow-manager.c:790 #2 0x000000000062642d in TmThreadsManagement (td=0x1bb024c0) at tm-threads.c:709 #3 0x00007f87faa156ba in start_thread (arg=0x7f8693fff700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 7 (Thread 0x7f8723fff700 (LWP 16276)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x1e4ca880, data=0x7f8717fffd80, slot=0x16860a40) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x1e4ca880) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f8723fff700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 6 (Thread 0x7f87f0b85700 (LWP 16268)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x2348f7c0, data=0x7f87bffffd80, slot=0x218df0d0) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x2348f7c0) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87f0b85700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 5 (Thread 0x7f87b17fa700 (LWP 16274)): ---Type to continue, or q to quit--- #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x19d1a650, data=0x7f874bfffd80, slot=0x169f8de0) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x19d1a650) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87b17fa700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 4 (Thread 0x7f87237fe700 (LWP 16277)): #0 _mm_or_si128 (__B=..., __A=...) at /usr/lib/gcc/x86_64-linux-gnu/5/include/emmintrin.h:1282 #1 or128 (b=..., a=...) at /home/pevman/tests/hyperscan/src/util/simd_utils.h:203 #2 fdr_engine_exec (fdr=, a=, control=1) at /home/pevman/tests/hyperscan/src/fdr/fdr.c:772 #3 0x00007f87fa06f981 in fdrExec (fdr=, buf=, len=, start=, cb=, scratch=, groups=1) at /home/pevman/tests/hyperscan/src/fdr/fdr.c:849 #4 0x00007f87fa12926c in roseBlockFloating (scratch=0x7f86f5235900, t=0x26b1e3c0) at /home/pevman/tests/hyperscan/src/rose/block.c:258 #5 roseBlockExec (t=, scratch=) at /home/pevman/tests/hyperscan/src/rose/block.c:397 #6 0x00007f87fa0638e8 in rawBlockExec (scratch=0x7f86f5235900, rose=0x26b1e3c0) at /home/pevman/tests/hyperscan/src/runtime.c:188 #7 hs_scan (db=, data=, length=1460, flags=, scratch=0x7f86f5235900, onEvent=, userCtx=) at /home/pevman/tests/hyperscan/src/runtime.c:410 #8 0x000000000069920c in SCHSSearch (mpm_ctx=0x24931850, mpm_thread_ctx=0x7f86f5235720, pmq=0x7f86f5235750, buf=0x7f8570fda638 , buflen=1460) at util-mpm-hs.c:936 #9 0x0000000000500870 in PrefilterPktStream (det_ctx=0x7f86f5235610, p=0x7f86fdeff1b0, pectx=0x24931850) at detect-engine-payload.c:99 #10 0x00000000005050b0 in Prefilter (det_ctx=0x7f86f5235610, sgh=0x24ba6310, p=0x7f86fdeff1b0, flags=8 '\b', has_state=false) at detect-engine-prefilter.c:190 #11 0x00000000004bd14f in SigMatchSignatures (th_v=0x18750fa0, de_ctx=0x165e2fe0, det_ctx=0x7f86f5235610, p=0x7f86fdeff1b0) at detect.c:1111 #12 0x00000000004bddae in DetectFlow (tv=0x18750fa0, de_ctx=0x165e2fe0, det_ctx=0x7f86f5235610, p=0x7f86fdeff1b0) at detect.c:1508 #13 0x00000000004be012 in Detect (tv=0x18750fa0, p=0x7f86fdeff1b0, data=0x7f86f5235610, pq=0x0, postpq=0x0) at detect.c:1582 #14 0x0000000000575eb3 in FlowWorker (tv=0x18750fa0, p=0x7f86fdeff1b0, data=0x7f86fdf45fc0, preq=0x166488a0, unused=0x0) at flow-worker.c:257 #15 0x0000000000624c2a in TmThreadsSlotVarRun (tv=0x18750fa0, p=0x7f86fdeff1b0, slot=0x1670f380) at tm-threads.c:130 #16 0x00000000005eee1f in TmThreadsSlotProcessPkt (tv=0x18750fa0, s=0x1670f380, p=0x7f86fdeff1b0) at tm-threads.h:147 #17 0x00000000005f1312 in AFPParsePacketV3 (ptv=0x7f870bfffd80, pbd=0x7f8570fd8000, ppd=0x7f8570fda5b0) at source-af-packet.c:1036 #18 0x00000000005f1389 in AFPWalkBlock (ptv=0x7f870bfffd80, pbd=0x7f8570fd8000) at source-af-packet.c:1051 #19 0x00000000005f1539 in AFPReadFromRingV3 (ptv=0x7f870bfffd80) at source-af-packet.c:1090 #20 0x00000000005f2aa1 in ReceiveAFPLoop (tv=0x18750fa0, data=0x7f870bfffd80, slot=0x16970db0) at source-af-packet.c:1479 #21 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x18750fa0) at tm-threads.c:334 #22 0x00007f87faa156ba in start_thread (arg=0x7f87237fe700) at pthread_create.c:333 #23 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 3 (Thread 0x7f87f1386700 (LWP 16267)): #0 0x00007f87f942170d in poll () at ../sysdeps/unix/syscall-template.S:84 #1 0x00000000005f27c8 in ReceiveAFPLoop (tv=0x1f174e60, data=0x7f87dbfffd80, slot=0x22222f80) at source-af-packet.c:1452 #2 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x1f174e60) at tm-threads.c:334 #3 0x00007f87faa156ba in start_thread (arg=0x7f87f1386700) at pthread_create.c:333 #4 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 Thread 2 (Thread 0x7f87fc17e940 (LWP 16197)): #0 0x00007f87f93f230d in nanosleep () at ../sysdeps/unix/syscall-template.S:84 #1 0x00007f87f9423d54 in usleep (useconds=) at ../sysdeps/posix/usleep.c:32 #2 0x00000000006202d5 in SuricataMainLoop (suri=0x7ffc76379e70) at suricata.c:2797 #3 0x00000000006207ec in main (argc=36, argv=0x7ffc7637a888) at suricata.c:2928 ---Type to continue, or q to quit--- Thread 1 (Thread 0x7f87b0ff9700 (LWP 16275)): #0 0x000000000052d689 in GetBufferForTX (tx=0x7f87298e9d30, tx_id=10, de_ctx=0x0, det_ctx=0x7f8729235610, f=0x7f84292008d0, htp_state=0x7f87298df770, flags=36 '$', buffer_len=0x7f87b0ff7004) at detect-http-start.c:115 #1 0x000000000052daad in PrefilterTxHttpRequestStart (det_ctx=0x7f8729235610, pectx=0x24928550, p=0x7f8731efe7c0, f=0x7f84292008d0, txv=0x7f87298e9d30, idx=10, flags=36 '$') at detect-http-start.c:192 #2 0x0000000000504f61 in PrefilterTx (det_ctx=0x7f8729235610, sgh=0x24933510, p=0x7f8731efe7c0, flags=36 '$') at detect-engine-prefilter.c:138 #3 0x000000000050514d in Prefilter (det_ctx=0x7f8729235610, sgh=0x24933510, p=0x7f8731efe7c0, flags=36 '$', has_state=true) at detect-engine-prefilter.c:206 #4 0x00000000004bd14f in SigMatchSignatures (th_v=0x22b877c0, de_ctx=0x165e2fe0, det_ctx=0x7f8729235610, p=0x7f8731efe7c0) at detect.c:1111 #5 0x00000000004bddae in DetectFlow (tv=0x22b877c0, de_ctx=0x165e2fe0, det_ctx=0x7f8729235610, p=0x7f8731efe7c0) at detect.c:1508 #6 0x00000000004be012 in Detect (tv=0x22b877c0, p=0x7f8731efe7c0, data=0x7f8729235610, pq=0x0, postpq=0x0) at detect.c:1582 #7 0x0000000000575eb3 in FlowWorker (tv=0x22b877c0, p=0x7f8731efe7c0, data=0x7f8731f45fc0, preq=0x1666bf10, unused=0x0) at flow-worker.c:257 #8 0x0000000000624c2a in TmThreadsSlotVarRun (tv=0x22b877c0, p=0x7f8731efe7c0, slot=0x16669cc0) at tm-threads.c:130 #9 0x00000000005eee1f in TmThreadsSlotProcessPkt (tv=0x22b877c0, s=0x16669cc0, p=0x7f8731efe7c0) at tm-threads.h:147 #10 0x00000000005f1312 in AFPParsePacketV3 (ptv=0x7f872ffffd80, pbd=0x7f85a82b0000, ppd=0x7f85a82b0c80) at source-af-packet.c:1036 #11 0x00000000005f1389 in AFPWalkBlock (ptv=0x7f872ffffd80, pbd=0x7f85a82b0000) at source-af-packet.c:1051 #12 0x00000000005f1539 in AFPReadFromRingV3 (ptv=0x7f872ffffd80) at source-af-packet.c:1090 #13 0x00000000005f2aa1 in ReceiveAFPLoop (tv=0x22b877c0, data=0x7f872ffffd80, slot=0x16a359c0) at source-af-packet.c:1479 #14 0x0000000000625594 in TmThreadsSlotPktAcqLoop (td=0x22b877c0) at tm-threads.c:334 #15 0x00007f87faa156ba in start_thread (arg=0x7f87b0ff9700) at pthread_create.c:333 #16 0x00007f87f942d3dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 (gdb) (gdb)