GNU gdb (Ubuntu/Linaro 7.4-2012.04-0ubuntu2.1) 7.4-2012.04 Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: ... Reading symbols from /usr/local/bin/suricata...done. warning: core file may not match specified executable file. [New LWP 6094] [New LWP 6096] [New LWP 6099] [New LWP 6095] [New LWP 6100] [New LWP 6102] [New LWP 6103] [New LWP 6104] [New LWP 6105] [New LWP 6106] [New LWP 6107] [New LWP 6109] [New LWP 6097] [New LWP 6113] [New LWP 6110] [New LWP 6112] [New LWP 6093] [New LWP 6098] [New LWP 6108] [New LWP 6111] [New LWP 6101] warning: Can't read pathname for load map: Input/output error. [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `suricata --pfring-int=eth3 --pfring-cluster-id=99 --pfring-cluster-type=cluster'. Program terminated with signal 11, Segmentation fault. #0 AppLayerProtoDetectPMMatchSignature (buflen=8, buf=0x7f39c2d45920 "\005", s=, ipproto=) at app-layer-detect-proto.c:173 173 if (s->cd->offset > buflen) { (gdb) (gdb) (gdb) thread apply all bt Thread 21 (Thread 0x7f3943fff700 (LWP 6101)): #0 0x00007f3a03f6deb4 in __pthread_mutex_lock (mutex=0x10213b30) at pthread_mutex_lock.c:61 #1 0x0000000000461a15 in SigMatchSignatures (th_v=0xa37e1060, de_ctx=0xa0fd2260, det_ctx=0x7f393c013b60, p=0x6e974d0) at detect.c:1129 #2 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #3 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37e1060, p=0x6e974d0, slot=) at tm-threads.c:559 #5 0x000000000051fc1f in TmThreadsSlotVarRun (tv=0xa37e1060, p=0x6707600, slot=) at tm-threads.c:585 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x6707600, s=0xa37e1290, tv=0xa37e1060) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0xa37e1060, data=0x7f393c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37e1060) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f3943fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 20 (Thread 0x7f38b37fe700 (LWP 6111)): #0 0x00007f3a03f6e18b in __pthread_mutex_trylock (mutex=0x7f39fe852d60) at pthread_mutex_trylock.c:65 #1 0x00000000004d6872 in FlowTimeoutHash (ts=0x7f38b37fd520, try_cnt=0, counters=0x7f38b37fd540) at flow-manager.c:347 #2 0x00000000004d6e04 in FlowManagerThread (td=0xa378f220) at flow-manager.c:481 #3 0x00007f3a03f6be9a in start_thread (arg=0x7f38b37fe700) at pthread_create.c:308 #4 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #5 0x0000000000000000 in ?? () Thread 19 (Thread 0x7f38d3fff700 (LWP 6108)): #0 __memcpy_ssse3_back () at ../sysdeps/x86_64/multiarch/memcpy-ssse3-back.S:88 #1 0x00007f3a045d0844 in pfring_mod_recv () from /usr/local/pfring/lib/libpcap.so.1 #2 0x00007f3a045ceb9c in pfring_recv () from /usr/local/pfring/lib/libpcap.so.1 #3 0x00000000005090ad in ReceivePfringLoop (tv=0xa3668c10, data=0x7f38cc0008c0, slot=) at source-pfring.c:316 #4 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa3668c10) at tm-threads.c:703 #5 0x00007f3a03f6be9a in start_thread (arg=0x7f38d3fff700) at pthread_create.c:308 #6 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #7 0x0000000000000000 in ?? () Thread 18 (Thread 0x7f3973fff700 (LWP 6098)): #0 0x000000000054882b in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f396c013c30, buf=0x49f46ea "\001", buflen=1425) at util-mpm-ac.c:1284 #1 0x0000000000462cd3 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=4 '\004', p=0x49f3f10, smsg=0x0, det_ctx=0x7f396c013b60, de_ctx=0xa0fd2260) at detect.c:972 #2 SigMatchSignatures (th_v=0x584606fb0, de_ctx=0xa0fd2260, det_ctx=0x7f396c013b60, p=0x49f3f10) at detect.c:1300 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x584606fb0, p=0x49f3f10, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x49f3f10, s=0xa377e8a0, tv=0x584606fb0) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0x584606fb0, data=0x7f396c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x584606fb0) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f3973fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 17 (Thread 0x7f3a054e3840 (LWP 6093)): #0 0x00007f3a032bf08d in nanosleep () at ../sysdeps/unix/syscall-template.S:82 #1 0x00007f3a032eceb4 in usleep (useconds=) at ../sysdeps/unix/sysv/linux/usleep.c:33 ---Type to continue, or q to quit--- #2 0x000000000040f7df in main (argc=, argv=) at suricata.c:2209 Thread 16 (Thread 0x7f38abfff700 (LWP 6112)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215 #1 0x0000000000446112 in SCPerfWakeupThread (arg=0xa38cf910) at counters.c:408 #2 0x00007f3a03f6be9a in start_thread (arg=0x7f38abfff700) at pthread_create.c:308 #3 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #4 0x0000000000000000 in ?? () Thread 15 (Thread 0x7f38b3fff700 (LWP 6110)): #0 0x00007f3a032ec763 in select () at ../sysdeps/unix/syscall-template.S:82 #1 0x0000000000527320 in UnixMain (this=0x7ffea0) at unix-manager.c:508 #2 0x000000000052801a in UnixManagerThread (td=0xa378efe0) at unix-manager.c:867 #3 0x00007f3a03f6be9a in start_thread (arg=0x7f38b3fff700) at pthread_create.c:308 #4 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #5 0x0000000000000000 in ?? () Thread 14 (Thread 0x7f38ab7fe700 (LWP 6113)): #0 pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:215 #1 0x0000000000449a92 in SCPerfMgmtThread (arg=0xa374c0a0) at counters.c:340 #2 0x00007f3a03f6be9a in start_thread (arg=0x7f38ab7fe700) at pthread_create.c:308 #3 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #4 0x0000000000000000 in ?? () Thread 13 (Thread 0x7f3983fff700 (LWP 6097)): #0 PmqReset (pmq=0x7f397c013c30) at /usr/include/x86_64-linux-gnu/bits/string3.h:85 #1 0x0000000000488e60 in PacketPatternCleanup (t=, det_ctx=0x7f397c013b60) at detect-engine-mpm.c:737 #2 0x0000000000461f36 in SigMatchSignatures (th_v=0x49bc089f0, de_ctx=0xa0fd2260, det_ctx=0x7f397c013b60, p=0x36c3d70) at detect.c:1570 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x49bc089f0, p=0x36c3d70, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x36c3d70, s=0xa371b2f0, tv=0x49bc089f0) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0x49bc089f0, data=0x7f397c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x49bc089f0) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f3983fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 12 (Thread 0x7f38c3fff700 (LWP 6109)): #0 0x000000000054882b in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f38bc013c30, buf=0x3911bfa "\001", buflen=1438) at util-mpm-ac.c:1284 #1 0x0000000000462cd3 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=8 '\b', p=0x3911420, smsg=0x0, det_ctx=0x7f38bc013b60, de_ctx=0xa0fd2260) at detect.c:972 #2 SigMatchSignatures (th_v=0xa37f88b0, de_ctx=0xa0fd2260, det_ctx=0x7f38bc013b60, p=0x3911420) at detect.c:1300 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37f88b0, p=0x3911420, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x3911420, s=0xa36b7740, tv=0xa37f88b0) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0xa37f88b0, data=0x7f38bc0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37f88b0) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f38c3fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 ---Type to continue, or q to quit--- #11 0x0000000000000000 in ?? () Thread 11 (Thread 0x7f38e3fff700 (LWP 6107)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f38dc013c30, buf=0x6a80b2a "\265\005}\017)\272r\300\253B\354\305w\250\343vZ\240\254\006Z\375\360\071\320/\362\255\345\071\201\255\355\337\003\372\272\a\244\327q\b\216\"8\250\326o0\214\314\320\361+^\276\307\370x.\333Ƽ\236\026\330v\312\372\031\342\230륧t\022\316\005R\227\320J\220\264\257\025\225}H\347\005%o\"8\a\376^\362\067(\034I\210\350^\002\306}7\366M\002n\242\361lqz\203<\257\275\351\025\061\336&\307\\\243\005M.@\365l\346HyO6\300\320W8\257\215\017!o\\)\201v\350\355h\252\225\225\372\257\222K\204\277\274\026Z%\275\303\035\002\023\020>\363\312R\270\220\066\320/\271\360\211Su\005\062\261\324\336\316", ..., buflen=1185) at util-mpm-ac.c:1285 #1 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=4 '\004', p=0x6a80350, smsg=0x0, det_ctx=0x7f38dc013b60, de_ctx=0xa0fd2260) at detect.c:963 #2 SigMatchSignatures (th_v=0xa37e49e0, de_ctx=0xa0fd2260, det_ctx=0x7f38dc013b60, p=0x6a80350) at detect.c:1300 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37e49e0, p=0x6a80350, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x6a80350, s=0xa37e4c10, tv=0xa37e49e0) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0xa37e49e0, data=0x7f38dc0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37e49e0) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f38e3fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 10 (Thread 0x7f38f3fff700 (LWP 6106)): #0 SigMatchSignaturesBuildMatchArray (det_ctx=0x7f38ec013b60, p=0x290eb50, mask=, alproto=0) at detect-simd.c:171 #1 0x0000000000461dbe in SigMatchSignatures (th_v=0xa376e730, de_ctx=0xa0fd2260, det_ctx=0x7f38ec013b60, p=0x290eb50) at detect.c:1305 #2 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #3 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa376e730, p=0x290eb50, slot=) at tm-threads.c:559 #5 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x290eb50, s=0xa3726530, tv=0xa376e730) at tm-threads.h:142 #6 ReceivePfringLoop (tv=0xa376e730, data=0x7f38ec0008c0, slot=) at source-pfring.c:338 #7 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa376e730) at tm-threads.c:703 #8 0x00007f3a03f6be9a in start_thread (arg=0x7f38f3fff700) at pthread_create.c:308 #9 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #10 0x0000000000000000 in ?? () Thread 9 (Thread 0x7f3903fff700 (LWP 6105)): #0 0x0000000000468106 in SigMatchSignaturesBuildMatchArray (det_ctx=0x7f38fc013b60, p=0x2f5b440, mask=, alproto=0) at detect-simd.c:171 #1 0x0000000000461dbe in SigMatchSignatures (th_v=0xa36e5190, de_ctx=0xa0fd2260, det_ctx=0x7f38fc013b60, p=0x2f5b440) at detect.c:1305 #2 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #3 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa36e5190, p=0x2f5b440, slot=) at tm-threads.c:559 #5 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x2f5b440, s=0xa37e8ee0, tv=0xa36e5190) at tm-threads.h:142 #6 ReceivePfringLoop (tv=0xa36e5190, data=0x7f38fc0008c0, slot=) at source-pfring.c:338 #7 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa36e5190) at tm-threads.c:703 #8 0x00007f3a03f6be9a in start_thread (arg=0x7f3903fff700) at pthread_create.c:308 #9 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #10 0x0000000000000000 in ?? () Thread 8 (Thread 0x7f3913fff700 (LWP 6104)): #0 __ctype_tolower_loc () at ../include/ctype.h:45 #1 0x000000000054880c in SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f390c013c30, buf=0x46ebab6 "\025ݺ8\211\223R\006\207", buflen=1460) at util-mpm-ac.c:1284 #2 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=8 '\b', p=0x46eb2d0, smsg=0x0, det_ctx=0x7f390c013b60, de_ctx=0xa0fd2260) ---Type to continue, or q to quit--- at detect.c:963 #3 SigMatchSignatures (th_v=0xa37d80a0, de_ctx=0xa0fd2260, det_ctx=0x7f390c013b60, p=0x46eb2d0) at detect.c:1300 #4 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #5 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #6 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37d80a0, p=0x46eb2d0, slot=) at tm-threads.c:559 #7 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x46eb2d0, s=0xa37d82d0, tv=0xa37d80a0) at tm-threads.h:142 #8 ReceivePfringLoop (tv=0xa37d80a0, data=0x7f390c0008c0, slot=) at source-pfring.c:338 #9 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37d80a0) at tm-threads.c:703 #10 0x00007f3a03f6be9a in start_thread (arg=0x7f3913fff700) at pthread_create.c:308 #11 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #12 0x0000000000000000 in ?? () Thread 7 (Thread 0x7f3923fff700 (LWP 6103)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f391c013c30, buf=0x64fa9ba "\001", buflen=1402) at util-mpm-ac.c:1285 #1 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=4 '\004', p=0x64fa1e0, smsg=0x0, det_ctx=0x7f391c013b60, de_ctx=0xa0fd2260) at detect.c:963 #2 SigMatchSignatures (th_v=0xa36b6190, de_ctx=0xa0fd2260, det_ctx=0x7f391c013b60, p=0x64fa1e0) at detect.c:1300 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa36b6190, p=0x64fa1e0, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x64fa1e0, s=0xa3729330, tv=0xa36b6190) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0xa36b6190, data=0x7f391c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa36b6190) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f3923fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 6 (Thread 0x7f3933fff700 (LWP 6102)): #0 0x000000000056e433 in RingBufferMrMwPut (rb=0x2400d30, ptr=0x6dbd280) at util-ringbuffer.c:768 #1 0x000000000050916d in TmThreadsSlotProcessPkt (p=0x6dbd280, s=0xa37b9da0, tv=0xa3776ff0) at tm-threads.h:156 #2 ReceivePfringLoop (tv=0xa3776ff0, data=0x7f392c0008c0, slot=) at source-pfring.c:338 #3 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa3776ff0) at tm-threads.c:703 #4 0x00007f3a03f6be9a in start_thread (arg=0x7f3933fff700) at pthread_create.c:308 #5 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #6 0x0000000000000000 in ?? () Thread 5 (Thread 0x7f3953fff700 (LWP 6100)): #0 0x000000000050e1de in StreamTcpValidateAck (p=0xfb44d30, stream=0x7f355c6aa428, ssn=) at stream-tcp.c:5145 #1 HandleEstablishedPacketToServer (pq=0x7f394c0129d0, p=0xfb44d30, ssn=0x7f355c6aa420, tv=0x66d4e2fc0, stt=) at stream-tcp.c:1848 #2 StreamTcpPacketStateEstablished (tv=0x66d4e2fc0, p=0xfb44d30, stt=0x7f394c0129c0, ssn=0x7f355c6aa420, pq=0x7f394c0129d0) at stream-tcp.c:2322 #3 0x0000000000511b6e in StreamTcpPacket (tv=0x66d4e2fc0, p=0xfb44d30, stt=0x7f394c0129c0, pq=0xa3714170) at stream-tcp.c:4242 #4 0x0000000000512dac in StreamTcp (tv=0x66d4e2fc0, p=0xfb44d30, data=0x7f394c0129c0, pq=0xa3714170, postpq=) at stream-tcp.c:4484 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x66d4e2fc0, p=0xfb44d30, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0xfb44d30, s=0xa3713ff0, tv=0x66d4e2fc0) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0x66d4e2fc0, data=0x7f394c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x66d4e2fc0) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f3953fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 4 (Thread 0x7f39bd174700 (LWP 6095)): ---Type to continue, or q to quit--- #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f399c013c30, buf=0x45323f6 "\027\003\001\005\300\021\002\275\355\034\003\310G\216\066p~]\312\060\315\024\241\023NK\315\321\177\230]9\277\334U7\233\227\302M9)\217L\304\312Ʀ\274\b\244\277\217_\026\230\264\372P\371\311k\320\034\060\367o?\374\322\355\335\023\066k\235u9t\272W\320\326\311[}\246Y\270\v\244`|Ԅ\267\345։U\023\210S%\330G\r\f\251\347\vF\223\365M\251װ\276\315mt\016\257\377\221L\260\347\352}Ph\371\217\004\311\070$\203\003փnr\364\263!\243\070\062\301\343\nh\371YW\251\237\260\230A\312']\345\233>\314\060\221K\275\006\231\006A\245", buflen=1460) at util-mpm-ac.c:1285 #1 0x0000000000462e78 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=8 '\b', p=0x4531c10, smsg=0x0, det_ctx=0x7f399c013b60, de_ctx=0xa0fd2260) at detect.c:963 #2 SigMatchSignatures (th_v=0xa41079b0, de_ctx=0xa0fd2260, det_ctx=0x7f399c013b60, p=0x4531c10) at detect.c:1300 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa41079b0, p=0x4531c10, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x4531c10, s=0xa36e72c0, tv=0xa41079b0) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0xa41079b0, data=0x7f399c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa41079b0) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f39bd174700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 3 (Thread 0x7f3963fff700 (LWP 6099)): #0 SCACSearch (mpm_ctx=, mpm_thread_ctx=, pmq=0x7f395c013c30, buf=0x7e2f68a "\001", buflen=1429) at util-mpm-ac.c:1285 #1 0x0000000000462cd3 in DetectMpmPrefilter (sms_runflags=, alstate=0x0, alproto=0, flags=4 '\004', p=0x7e2eeb0, smsg=0x0, det_ctx=0x7f395c013b60, de_ctx=0xa0fd2260) at detect.c:972 #2 SigMatchSignatures (th_v=0x495dff250, de_ctx=0xa0fd2260, det_ctx=0x7f395c013b60, p=0x7e2eeb0) at detect.c:1300 #3 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #4 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #5 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0x495dff250, p=0x7e2eeb0, slot=) at tm-threads.c:559 #6 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x7e2eeb0, s=0xa37b48a0, tv=0x495dff250) at tm-threads.h:142 #7 ReceivePfringLoop (tv=0x495dff250, data=0x7f395c0008c0, slot=) at source-pfring.c:338 #8 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0x495dff250) at tm-threads.c:703 #9 0x00007f3a03f6be9a in start_thread (arg=0x7f3963fff700) at pthread_create.c:308 #10 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #11 0x0000000000000000 in ?? () Thread 2 (Thread 0x7f3993fff700 (LWP 6096)): #0 0x00000000004680de in SigMatchSignaturesBuildMatchArray (det_ctx=0x7f398c013b60, p=0x6525bf0, mask=, alproto=0) at detect-simd.c:167 #1 0x0000000000461dbe in SigMatchSignatures (th_v=0xa367b290, de_ctx=0xa0fd2260, det_ctx=0x7f398c013b60, p=0x6525bf0) at detect.c:1305 #2 0x00000000004632f5 in Detect (data=, p=, tv=, pq=, postpq=) at detect.c:1708 #3 Detect (tv=, p=, data=, pq=, postpq=) at detect.c:1680 #4 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa367b290, p=0x6525bf0, slot=) at tm-threads.c:559 #5 0x000000000050915a in TmThreadsSlotProcessPkt (p=0x6525bf0, s=0xa36c2f40, tv=0xa367b290) at tm-threads.h:142 #6 ReceivePfringLoop (tv=0xa367b290, data=0x7f398c0008c0, slot=) at source-pfring.c:338 #7 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa367b290) at tm-threads.c:703 #8 0x00007f3a03f6be9a in start_thread (arg=0x7f3993fff700) at pthread_create.c:308 #9 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #10 0x0000000000000000 in ?? () Thread 1 (Thread 0x7f39c2d48700 (LWP 6094)): #0 AppLayerProtoDetectPMMatchSignature (buflen=8, buf=0x7f39c2d45920 "\005", s=, ipproto=) at app-layer-detect-proto.c:173 #1 AppLayerProtoDetectPMGetProto (pm_results=0x7f39c2d44f70, ipproto=6 '\006', direction=, buflen=30, buf=0x7f39c2d45920 "\005", tctx=0x7f39ac0130f0, f=) at app-layer-detect-proto.c:250 #2 AppLayerProtoDetectGetProto (tctx=0x7f39ac0130f0, f=0x1b9621f0, buf=0x7f39c2d45920 "\005", buflen=30, ipproto=6 '\006', direction=) at app-layer-detect-proto.c:1213 #3 0x00000000004191c1 in AppLayerHandleTCPData (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, p=0x7f38a6d1cb10, f=0x1b9621f0, ssn=0x7f33c277a000, stream=0x7f33c277a008, data=0x7f39c2d45920 "\005", ---Type to continue, or q to quit--- data_len=30, flags=9 '\t') at app-layer.c:129 #4 0x0000000000514b33 in StreamTcpReassembleAppLayer (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, ssn=0x7f33c277a000, stream=0x7f33c277a008, p=0x7f38a6d1cb10) at stream-tcp-reassemble.c:3027 #5 0x0000000000515370 in StreamTcpReassembleHandleSegmentUpdateACK (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, ssn=0x7f33c277a000, stream=0x7f33c277a008, p=0x7f38a6d1cb10) at stream-tcp-reassemble.c:3373 #6 0x00000000005170a3 in StreamTcpReassembleHandleSegment (tv=0xa37e8070, ra_ctx=0x7f39ac0130b0, ssn=0x7f33c277a000, stream=0x7f33c277a050, p=0x7f38a6d1cb10, pq=) at stream-tcp-reassemble.c:3401 #7 0x000000000050de9c in HandleEstablishedPacketToClient (pq=, p=, ssn=, tv=, stt=) at stream-tcp.c:2090 #8 StreamTcpPacketStateEstablished (tv=0xa37e8070, p=0x7f38a6d1cb10, stt=0x7f39ac0129c0, ssn=0x7f33c277a000, pq=0x7f39ac0129d0) at stream-tcp.c:2336 #9 0x0000000000511b6e in StreamTcpPacket (tv=0xa37e8070, p=0x7f38a6d1cb10, stt=0x7f39ac0129c0, pq=0xa37f3270) at stream-tcp.c:4242 #10 0x0000000000512dac in StreamTcp (tv=0xa37e8070, p=0x7f38a6d1cb10, data=0x7f39ac0129c0, pq=0xa37f3270, postpq=) at stream-tcp.c:4484 #11 0x000000000051fbe8 in TmThreadsSlotVarRun (tv=0xa37e8070, p=0x7f38a6d1cb10, slot=) at tm-threads.c:559 #12 0x00000000005091b7 in TmThreadsSlotProcessPkt (p=0x7298270, s=, tv=0xa37e8070) at tm-threads.h:171 #13 ReceivePfringLoop (tv=0xa37e8070, data=0x7f39ac0008c0, slot=) at source-pfring.c:338 #14 0x0000000000522c1e in TmThreadsSlotPktAcqLoop (td=0xa37e8070) at tm-threads.c:703 #15 0x00007f3a03f6be9a in start_thread (arg=0x7f39c2d48700) at pthread_create.c:308 #16 0x00007f3a032f33fd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 #17 0x0000000000000000 in ?? () (gdb) (gdb) exit Undefined command: "exit". Try "help". (gdb) quit root@suricata:~#