Actions
Bug #1360
closedSuricata hangs sometimes when it receives TERM signal
Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:
Description
If i restart suricata with
kill -s TERM $(pidof suricata)
it sometimes hangs and won't quit properly. I wrote a test that does a restart every minute, sometimes it works 60 times and sometimes it already hangs after <10 attempts.
Log when it hangs:
12/1/2015 -- 10:02:33 - <Notice> - Signal Received. Stopping engine. 12/1/2015 -- 10:02:33 - <Info> - 0 new flows, 0 established flows were timed out, 0 flows in closed state 12/1/2015 -- 10:02:34 - <Info> - time elapsed 56.031s
While the other attempts work well and go on with:
12/1/2015 -- 10:01:34 - <Notice> - (Recv-Q0) Treated: Pkts 0, Bytes 0, Errors 0 12/1/2015 -- 10:01:34 - <Notice> - (Recv-Q0) Verdict: Accepted 0, Dropped 0, Replaced 0
As you can see it's nothing traffic related.
Version is 2.0.5 with this build:
This is Suricata version 2.0.5 RELEASE Features: NFQ PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG HAVE_HTP_URI_NORMALIZE_HOOK HAVE_NSS HAVE_LIBJANSSON SIMD support: none Atomic intrisics: 1 2 4 8 byte(s) 32-bits, Little-endian architecture GCC version 4.4.6 20110731 (Red Hat 4.4.6-3), C version 199901 compiled with -fstack-protector compiled with _FORTIFY_SOURCE=2 L1 cache line size (CLS)=64 compiled with LibHTP v0.5.16, linked against LibHTP v0.5.16 Suricata Configuration: AF_PACKET support: yes PF_RING support: no NFQueue support: yes NFLOG support: no IPFW support: no DAG enabled: no Napatech enabled: no Unix socket enabled: yes Detection enabled: yes libnss support: yes libnspr support: yes libjansson support: yes Prelude support: no PCRE jit: no LUA support: no libluajit: no libgeoip: no Non-bundled htp: no Old barnyard2 support: no CUDA enabled: no Suricatasc install: no Unit tests enabled: no Debug output enabled: no Debug validation enabled: no Profiling enabled: no Profiling locks enabled: no Coccinelle / spatch: no Generic build parameters: Installation prefix (--prefix): /usr Configuration directory (--sysconfdir): /etc/suricata/ Log directory (--localstatedir) : /var/log/suricata/ Host: i686-redhat-linux-gnu GCC binary: gcc -std=gnu99 GCC Protect enabled: yes GCC march native enabled: no GCC Profile enabled: no
I will create some backtraces.
Actions