Project

General

Profile

Actions
Copy link

Bug #1723

closed

Crash Suricata 3.0 with prelude support

Added by oran geade about 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

Hello,

This makes 3 times I encounter this bug in two weeks.
Suricata crash and create a huge file : /usr/local/var/spool/prelude/suricata/global/data0 (2.3 G)
Suricata version : 3 with prelude config.

You can find gdb and build info in attachment.

Best regards,

Files

Download all files
suricata_buildinfo.txt (2.6 KB) suricata_buildinfo.txt oran geade, 03/02/2016 02:28 AM
suricata_gdb.txt (16.9 KB) suricata_gdb.txt oran geade, 03/02/2016 02:28 AM
suricata_gdb2.txt (15.3 KB) suricata_gdb2.txt oran geade, 03/07/2016 01:06 AM
Actions
Copy link
 #1

Updated by Victor Julien about 8 years ago

  • Subject changed from Crach Suricata 3.0 with prelude support to Crash Suricata 3.0 with prelude support
Actions
Copy link
 #2

Updated by Victor Julien about 8 years ago

That is a strange backtrace, not sure what to make of it. Can you share more backtraces from other crashes?

Actions
Copy link
 #3

Updated by oran geade about 8 years ago

I will share more backtraces, thanks.

Actions
Copy link
 #4

Updated by oran geade about 8 years ago

Hello,

I've got an other crash : suricata_gdb2.txt

Actions
Copy link
 #5

Updated by Victor Julien about 8 years ago

Can you try running this branch? https://github.com/inliniac/suricata/pull/1912

Actions
Copy link
 #6

Updated by oran geade about 8 years ago

Thanks, I've just apply this update.

I will do a feedback if it works.

Actions
Copy link
 #7

Updated by oran geade about 8 years ago

It does not work. I've got another crash.

Actions
Copy link
 #8

Updated by Victor Julien about 8 years ago

Does it only crash if prelude is enabled?

Actions
Copy link
 #9

Updated by oran geade about 8 years ago

I will test without prelude, but I think it crash only with it.

Actions
Copy link
 #10

Updated by Victor Julien about 8 years ago

  • Status changed from New to Assigned
  • Assignee set to Eric Leblond
  • Target version set to 70

Sounds like a French affair then :)

Actions
Copy link
 #11

Updated by oran geade about 8 years ago

Victor Julien wrote:

Sounds like a French affair then :)

Indeed :)

Actions
Copy link
 #12

Updated by oran geade about 8 years ago

Hello,

There are no more crashes for one week.

Actions
Copy link
 #13

Updated by Eric Leblond almost 8 years ago

Hello oran geade, no crash seen? Can we close the ticket ?

Actions
Copy link
 #14

Updated by Victor Julien almost 8 years ago

  • Status changed from Assigned to Closed
  • Assignee deleted (Eric Leblond)
  • Priority changed from High to Normal
  • Target version deleted (70)

Please reopen if issue reappears.

Actions
Copy link

Also available in: Atom PDF