Bug #1546: VMWare ESXi interface name and TM_THREAD_NAME_MAX size - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #1546

closed

VMWare ESXi interface name and TM_THREAD_NAME_MAX size

Added by Jozef Mlich over 8 years ago. Updated over 8 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

The thread name could be composed from following parameters:
- RxAFP
- interface name e.g. eth0
- thread id

The interface name could be "eno16780032" when you use VMWare ESXi and CentOS. The maximum size of thread name is given by TM_THREAD_NAME_MAX (probably also TM_QUEUE_NAME_MAX and THREAD_NAME_LEN). The thread name will be "RxAFPeno167800321" which is 18 characters. This leads to trimming of thread name. In the end we are not able to distinguish thread afterwards.

In attachment you can find suggest patch to fix this issue. I was trying to send this to your commit mailing list. I have extended it yet a bit.

Files

vmware-esxi-thread-name.patch (893 Bytes) vmware-esxi-thread-name.patch

Jozef Mlich, 09/10/2015 05:56 AM