GNU gdb (GDB) Red Hat Enterprise Linux 7.6.1-115.el7
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/sbin/suricata...Reading symbols from /usr/lib/debug/usr/sbin/suricata.debug...done.
done.
[New LWP 12097]
[New LWP 12100]
[New LWP 12101]
[New LWP 12096]
[New LWP 12098]
[New LWP 12099]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `suricata -r core-W#01-zc:0@2-11-993-990-442-1604842672.pcap -c /etc/suricata/cl'.
Program terminated with signal 11, Segmentation fault.
#0  0x0000557fc4df6c08 in StorageGetById (storage=storage@entry=0x128, 
    type=type@entry=STORAGE_FLOW, id=1) at util-storage.c:224
224	    return storage[id];
Missing separate debuginfos, use: debuginfo-install hiredis-0.12.1-1.el7.x86_64
(gdb) 
Thread 6 (Thread 0x7f71ed8ba700 (LWP 12099)):
#0  0x00007f71f0f6580d in nanosleep ()
    at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00007f71f0f960e4 in usleep (useconds=useconds@entry=100)
    at ../sysdeps/unix/sysv/linux/usleep.c:32
        ts = {tv_sec = 0, tv_nsec = 100000}
#2  0x0000557fc4d5c8d4 in FlowRecycler (th_v=0x557fca0221e0, 
    thread_data=0x7f71d80008c0) at flow-manager.c:1210
        list = {top = 0x0, bot = 0x0, len = 0}
        bail = 0
        f = 0x0
        ts = {tv_sec = 1604842572, tv_usec = 752230}
        recycled_cnt = 0
        ftd = 0x7f71d80008c0
        __PRETTY_FUNCTION__ = "FlowRecycler"
        fr_passes = <optimized out>
        startts = {tv_sec = 1604846259, tv_usec = 279193}
        __FUNCTION__ = "FlowRecycler"
#3  0x0000557fc4db877d in TmThreadsManagement (td=0x557fca0221e0)
    at tm-threads.c:541
        tv = 0x557fca0221e0
        s = 0x557fce440280
        r = <optimized out>
        __PRETTY_FUNCTION__ = "TmThreadsManagement"
        __FUNCTION__ = "TmThreadsManagement"
#4  0x00007f71f168fe65 in start_thread (arg=0x7f71ed8ba700)
    at pthread_create.c:307
        __res = <optimized out>
        pd = 0x7f71ed8ba700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140127293384448, 
                8396486675106229314, 0, 8392704, 0, 140127293384448, 
                -8474214069283197886, -8474170358434632638}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#5  0x00007f71f0f9e88d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Thread 5 (Thread 0x7f71ee0bb700 (LWP 12098)):
#0  0x0000557fc4d5ca58 in FlowTimeoutHash (td=td@entry=0x7f71d40008f0, 
    ts=ts@entry=0x7f71ee0baa50, hash_min=<optimized out>, hash_max=2730, 
    counters=counters@entry=0x7f71ee0baa70) at flow-manager.c:473
        fb = 0x7f71ef86b000
        i = 38
        check_bits = 274877906943
        check = 64
        idx = 2649
        cnt = 0
        emergency = 0
        rows_checked = 273
        rows_skipped = 0
        rows_busy = 0
        rows_empty = 192
#1  0x0000557fc4d5d3b8 in FlowTimeoutHashInChunks (chunks=240, iter=9, 
    counters=0x7f71ee0baa70, hash_max=<optimized out>, 
    hash_min=<optimized out>, ts=0x7f71ee0baa50, td=0x7f71d40008f0)
    at flow-manager.c:554
        rows = <optimized out>
        chunk_size = <optimized out>
        min = <optimized out>
        max = <optimized out>
#2  FlowManager (th_v=0x557fc94dd680, thread_data=0x7f71d40008c0)
    at flow-manager.c:899
        i = 9
        chunks = 240
        secs_passed = <optimized out>
        counters = {new = 0, est = 0, clo = 0, byp = 0, 
          rows_checked = 2457, rows_skipped = 0, rows_empty = 2457, 
          rows_busy = 0, rows_maxlen = 0, flows_checked = 0, 
          flows_notimeout = 0, flows_timeout = 0, flows_timeout_inuse = 0, 
          flows_removed = 0, flows_aside = 0, flows_aside_needs_work = 0, 
          bypassed_count = 0, bypassed_pkts = 0, bypassed_bytes = 0}
        len = <optimized out>
        ts_ms = 1604842572752
        rt = 1604842572
        emerge_p = <optimized out>
        ftd = 0x7f71d40008c0
        ts = {tv_sec = 1604842572, tv_usec = 752230}
        emerg = <optimized out>
        prev_emerg = false
        other_last_sec = 0
        flow_last_sec = <optimized out>
        hash_passes = <optimized out>
        hash_row_checks = <optimized out>
        hash_passes_chunks = <optimized out>
        hash_full_passes = <optimized out>
        pass_in_sec = 240
        startts = {tv_sec = 1604846259, tv_usec = 295159}
        hash_pass_iter = 9
        emerg_over_cnt = 0
        next_run_ms = <optimized out>
        __FUNCTION__ = "FlowManager"
#3  0x0000557fc4db877d in TmThreadsManagement (td=0x557fc94dd680)
    at tm-threads.c:541
        tv = 0x557fc94dd680
        s = 0x557fcc17ad40
        r = <optimized out>
        __PRETTY_FUNCTION__ = "TmThreadsManagement"
        __FUNCTION__ = "TmThreadsManagement"
#4  0x00007f71f168fe65 in start_thread (arg=0x7f71ee0bb700)
    at pthread_create.c:307
        __res = <optimized out>
        pd = 0x7f71ee0bb700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140127301777152, 
                8396486675106229314, 0, 8392704, 0, 140127301777152, 
                -8474212970308441022, -8474170358434632638}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#5  0x00007f71f0f9e88d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Thread 4 (Thread 0x7f71f5435b00 (LWP 12096)):
#0  0x00007f71f0f6580d in nanosleep ()
    at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00007f71f0f960e4 in usleep (useconds=useconds@entry=10000)
    at ../sysdeps/unix/sysv/linux/usleep.c:32
        ts = {tv_sec = 0, tv_nsec = 10000000}
#2  0x0000557fc4db4c67 in SuricataMainLoop (suri=<optimized out>)
    at suricata.c:2660
No locals.
#3  SuricataMain (argc=<optimized out>, argv=<optimized out>)
    at suricata.c:2821
        vlan_tracking = 1
        __FUNCTION__ = "SuricataMain"
#4  0x00007f71f0ec2505 in __libc_start_main (main=0x557fc4cb1b20 <main>, 
    argc=7, argv=0x7ffe801b9238, init=<optimized out>, 
    fini=<optimized out>, rtld_fini=<optimized out>, 
    stack_end=0x7ffe801b9228) at ../csu/libc-start.c:266
        result = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 8396486675106229314, 
                94007250852645, 140731047711280, 0, 0, 
                -8396029034047083454, -8474171424876270526}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 
              0x7f71f523e973 <_dl_init+275>, 0x7f71f5452150}, data = {
              prev = 0x0, cleanup = 0x0, canceltype = -182195853}}}
        not_first_call = <optimized out>
#5  0x0000557fc4cb1b4e in _start ()
No symbol table info available.

Thread 3 (Thread 0x7f71ec8b8700 (LWP 12101)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
No locals.
#1  0x0000557fc4ce40e0 in StatsMgmtThread (arg=0x557fcdc74c70)
    at counters.c:415
        cur_timev = {tv_sec = 1604846259, tv_usec = 295095}
        cond_time = {tv_sec = 1604846267, tv_nsec = 295095000}
        tv_local = 0x557fcdc74c70
        __FUNCTION__ = "StatsMgmtThread"
        __PRETTY_FUNCTION__ = "StatsMgmtThread"
        r = <optimized out>
#2  0x00007f71f168fe65 in start_thread (arg=0x7f71ec8b8700)
    at pthread_create.c:307
        __res = <optimized out>
        pd = 0x7f71ec8b8700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140127276599040, 
                8396486675106229314, 0, 8392704, 0, 140127276599040, 
                -8474216275822646206, -8474170358434632638}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#3  0x00007f71f0f9e88d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Thread 2 (Thread 0x7f71ed0b9700 (LWP 12100)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238
No locals.
#1  0x0000557fc4ce3a37 in StatsWakeupThread (arg=0x557fc9bc7530)
    at counters.c:487
        cur_timev = {tv_sec = 1604846259, tv_usec = 295016}
        cond_time = {tv_sec = 1604846262, tv_nsec = 295016000}
        tv = <optimized out>
        tv_local = 0x557fc9bc7530
        __FUNCTION__ = "StatsWakeupThread"
#2  0x00007f71f168fe65 in start_thread (arg=0x7f71ed0b9700)
    at pthread_create.c:307
        __res = <optimized out>
        pd = 0x7f71ed0b9700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140127284991744, 
                8396486675106229314, 0, 8392704, 0, 140127284991744, 
                -8474215168257954750, -8474170358434632638}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#3  0x00007f71f0f9e88d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Thread 1 (Thread 0x7f71eeb6b700 (LWP 12097)):
#0  0x0000557fc4df6c08 in StorageGetById (storage=storage@entry=0x128, 
    type=type@entry=STORAGE_FLOW, id=1) at util-storage.c:224
No locals.
#1  0x0000557fc4d5e513 in FlowGetStorageById (f=f@entry=0x0, 
    id=<optimized out>) at flow-storage.c:41
No locals.
#2  0x0000557fc4d89ccf in EveAddCommonOptions (
    cfg=cfg@entry=0x557fc6633ca0, p=p@entry=0x7f71dc26ff00, 
    f=<optimized out>, js=js@entry=0x7f71dc5eebc0) at output-json.c:451
        ms = <optimized out>
#3  0x0000557fc4d70ec1 in AlertJson (aft=aft@entry=0x7f71dc454840, 
    p=p@entry=0x7f71dc26ff00, tv=<optimized out>) at output-json-alert.c:622
        xff_cfg = 0x557fc6634300
        have_xff_ip = 0
        jb = 0x7f71dc5eebc0
        pa = 0x7f71dc2700b8
        addr = {src_ip = "116.90.231.16", '\000' <repeats 32 times>, 
          dst_ip = "185.100.143.115", '\000' <repeats 30 times>, sp = 0, 
          dp = 0, proto = "TCP", '\000' <repeats 12 times>}
        xff_buffer = "\000\000\000\000\000\000\000\000p\000\000\334q\177\000\000\361WI\021\216\200\377\377\020\250\266\356q\177\000\000\017\250\266\356q\177\000\000?\035\362\360q\177"
        i = 0
        payload = 0x7f71dc464890
        json_output_ctx = 0x557fc6633c80
#4  0x0000557fc4d71d59 in JsonAlertLogger (tv=<optimized out>, 
    thread_data=0x7f71dc454840, p=0x7f71dc26ff00) at output-json-alert.c:767
        aft = 0x7f71dc454840
#5  0x0000557fc4d8672c in OutputPacketLog (tv=0x557fc977af80, 
    p=0x7f71dc26ff00, thread_data=<optimized out>) at output-packet.c:116
        op_thread_data = <optimized out>
        logger = 0x557fc66342b0
        store = 0x7f71dc4658b0
#6  0x0000557fc4d6d294 in OutputLoggerLog (tv=tv@entry=0x557fc977af80, 
    p=p@entry=0x7f71dc26ff00, thread_data=<optimized out>) at output.c:882
        thread_store = <optimized out>
        logger = 0x557fc6635c50
        thread_store_node = 0x7f71dc475930
#7  0x0000557fc4d606a0 in FlowWorker (tv=0x557fc977af80, p=0x7f71dc26ff00, 
    data=0x7f71dc288090) at flow-worker.c:545
        fw = 0x7f71dc288090
        detect_thread = 0x7f71dc36a5b0
#8  0x0000557fc4db72ce in TmThreadsSlotVarRun (tv=tv@entry=0x557fc977af80, 
    p=p@entry=0x7f71dc26ff00, slot=<optimized out>) at tm-threads.c:117
        r = <optimized out>
        s = 0x557fccd5e390
#9  0x0000557fc4da0947 in TmThreadsSlotProcessPkt (p=0x7f71dc26ff00, 
    s=<optimized out>, tv=0x557fc977af80) at tm-threads.h:192
        r = <optimized out>
#10 PcapFileCallbackLoop (
    user=user@entry=0x7f71dc270940 "\240\t'\334q\177", h=0x7f71dc270e30, 
    pkt=0x7f71dc270ee0 "") at source-pcap-file-helper.c:101
        ptv = 0x7f71dc270940
        p = 0x7f71dc26ff00
#11 0x0000557fc4da0c0d in PcapFileDispatch (ptv=0x7f71dc270940)
    at source-pcap-file-helper.c:126
        loop_result = <optimized out>
        __FUNCTION__ = "PcapFileDispatch"
#12 0x0000557fc4d9f84e in ReceivePcapFileLoop (tv=<optimized out>, 
    data=0x7f71dc2708c0, slot=<optimized out>) at source-pcap-file.c:174
        __FUNCTION__ = "ReceivePcapFileLoop"
        status = TM_ECODE_OK
        ptv = 0x7f71dc2708c0
        s = <optimized out>
#13 0x0000557fc4db8b5e in TmThreadsSlotPktAcqLoop (td=0x557fc977af80)
    at tm-threads.c:312
        tv = 0x557fc977af80
        s = 0x557fc727d080
        run = 1 '\001'
        r = <optimized out>
        slot = <optimized out>
        __FUNCTION__ = "TmThreadsSlotPktAcqLoop"
#14 0x00007f71f168fe65 in start_thread (arg=0x7f71eeb6b700)
    at pthread_create.c:307
        __res = <optimized out>
        pd = 0x7f71eeb6b700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140127312983808, 
                8396486675106229314, 0, 8392704, 0, 140127312983808, 
                -8474211776307532734, -8474170358434632638}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#15 0x00007f71f0f9e88d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.
(gdb) quit
