Project

General

Profile

Actions
Copy link

Bug #1738

closed
MS CT

[ERRCODE: SC_ERR_MEM_ALLOC<1>] - Can not allocate fingerprint string - Suricata 2.0.11-1

Bug #1738: [ERRCODE: SC_ERR_MEM_ALLOC<1>] - Can not allocate fingerprint string - Suricata 2.0.11-1

Added by Marko Stojanovic about 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:

Description

Platform : Tested on Windows Server 2008R2 and 2012, both 64bit versions.
Suricata versions : Tested on Suricata 2.0.11-1

Error occurs while reading a publicly available pcap file :

http://download.netresec.com/pcap/maccdc-2012/maccdc2012_00013.pcap.gz (532MB warning)

Ran from a command line with Administrator privileges with next command parameters :

"suricata -v -c suricata.yaml -r ..\Users\Administrator\Downloads\maccdc2012_00013.pcap"

After the engine has started, and rules loaded, and after a few minutes of scanning, an error from the title starts to appear every few seconds.
As far as I notice, the scan doesn't stop, CPU total caps at 100% (one core) or about 50% (2 cores), with memory consumption of about 350-400MB for that pcap.

Files

Download all files
suricataOutput.txt (18.7 KB) suricataOutput.txt Marko Stojanovic, 03/10/2016 07:29 AM
tls.log (59.1 KB) tls.log Marko Stojanovic, 03/10/2016 08:23 AM
Actions
Copy link

Also available in: PDF Atom