Project

General

Profile

Actions

Bug #1360

closed

Suricata hangs sometimes when it receives TERM signal

Added by Andreas Herz almost 10 years ago. Updated almost 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

If i restart suricata with

kill -s TERM $(pidof suricata)

it sometimes hangs and won't quit properly. I wrote a test that does a restart every minute, sometimes it works 60 times and sometimes it already hangs after <10 attempts.

Log when it hangs:

12/1/2015 -- 10:02:33 - <Notice> - Signal Received.  Stopping engine.
12/1/2015 -- 10:02:33 - <Info> - 0 new flows, 0 established flows were timed out, 0 flows in closed state
12/1/2015 -- 10:02:34 - <Info> - time elapsed 56.031s

While the other attempts work well and go on with:

12/1/2015 -- 10:01:34 - <Notice> - (Recv-Q0) Treated: Pkts 0, Bytes 0, Errors 0
12/1/2015 -- 10:01:34 - <Notice> - (Recv-Q0) Verdict: Accepted 0, Dropped 0, Replaced 0

As you can see it's nothing traffic related.
Version is 2.0.5 with this build:

This is Suricata version 2.0.5 RELEASE
Features: NFQ PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LIBJANSSON 
SIMD support: none
Atomic intrisics: 1 2 4 8 byte(s)
32-bits, Little-endian architecture
GCC version 4.4.6 20110731 (Red Hat 4.4.6-3), C version 199901
compiled with -fstack-protector
compiled with _FORTIFY_SOURCE=2
L1 cache line size (CLS)=64
compiled with LibHTP v0.5.16, linked against LibHTP v0.5.16
Suricata Configuration:
  AF_PACKET support:                       yes
  PF_RING support:                         no
  NFQueue support:                         yes
  NFLOG support:                           no
  IPFW support:                            no
  DAG enabled:                             no
  Napatech enabled:                        no
  Unix socket enabled:                     yes
  Detection enabled:                       yes

  libnss support:                          yes
  libnspr support:                         yes
  libjansson support:                      yes
  Prelude support:                         no
  PCRE jit:                                no
  LUA support:                             no
  libluajit:                               no
  libgeoip:                                no
  Non-bundled htp:                         no
  Old barnyard2 support:                   no
  CUDA enabled:                            no

  Suricatasc install:                      no

  Unit tests enabled:                      no
  Debug output enabled:                    no
  Debug validation enabled:                no
  Profiling enabled:                       no
  Profiling locks enabled:                 no
  Coccinelle / spatch:                     no

Generic build parameters:
  Installation prefix (--prefix):          /usr
  Configuration directory (--sysconfdir):  /etc/suricata/
  Log directory (--localstatedir) :        /var/log/suricata/

  Host:                                    i686-redhat-linux-gnu
  GCC binary:                              gcc -std=gnu99
  GCC Protect enabled:                     yes
  GCC march native enabled:                no
  GCC Profile enabled:                     no

I will create some backtraces.

Actions #2

Updated by Victor Julien almost 10 years ago

  • Target version changed from 2.0.6 to 2.0.7
Actions #3

Updated by Victor Julien almost 10 years ago

  • Target version deleted (2.0.7)
Actions #4

Updated by Andreas Herz about 9 years ago

  • Assignee set to Andreas Herz
  • Target version set to TBD
Actions #5

Updated by Andreas Herz almost 9 years ago

Can't reproduce it anymore with 3.0 so closing for now.

Actions #6

Updated by Andreas Herz almost 9 years ago

  • Status changed from New to Closed
Actions #7

Updated by Victor Julien almost 9 years ago

  • Assignee deleted (Andreas Herz)
  • Target version deleted (TBD)
Actions

Also available in: Atom PDF