Suricata

Maybe a config issue or system overload? Or a bug?

Apr  8 20:27:24 scomp1145 suricata[32151]: *** Error in `/bin/suricata': free(): invalid next size (fast): 0x00007fd66c1f8440 ***

Apr 10 21:05:39 scomp1145 suricata[32588]: *** Error in `/bin/suricata': realloc(): invalid pointer: 0x00007fac7383fd80 ***

Apr 11 08:12:35 scomp1145 suricata[30257]: *** Error in `/bin/suricata': corrupted size vs. prev_size: 0x00007fb364224150 ***

Apr 12 16:44:52 scomp1145 suricata[19697]: *** Error in `/bin/suricata': corrupted size vs. prev_size: 0x00007f3064205af0 ***

Apr 17 17:12:15 scomp1145 suricata[14654]: *** Error in `/bin/suricata': double free or corruption (out): 0x00007fd22c23caa0 ***

Platform:
Red Hat Enterprise Linux Server release 7.6 (Maipo)
Kernel 3.10.0-957.10.1.el7.x86_64
PF-Ring 7.4.0
SE-Linux permissive
Hardware ProLiant DL380 G7, dual processor Xeon 5600 (24 cores), 141 GB RAM

1. suricata --build-info
   

   This is Suricata version 4.1.3 RELEASE
   Features: PCAP_SET_BUFF PF_RING AF_PACKET HAVE_PACKET_FANOUT LIBCAP_NG LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK PCRE_JIT HAVE_NSS HAVE_LIBJANSSON TLS MAGIC RUST 
   SIMD support: SSE_4_2 SSE_4_1 SSE_3 
   Atomic intrisics: 1 2 4 8 16 byte(s)
   64-bits, Little-endian architecture
   GCC version 4.8.5 20150623 (Red Hat 4.8.5-36), C version 199901
   compiled with -fstack-protector
   compiled with _FORTIFY_SOURCE=2
   L1 cache line size (CLS)=64
   thread local storage method: __thread
   compiled with LibHTP v0.5.30, linked against LibHTP v0.5.30
   
   Suricata Configuration:
     AF_PACKET support:                       yes
     eBPF support:                            no
     XDP support:                             no
     PF_RING support:                         yes
     NFQueue support:                         no
     NFLOG support:                           no
     IPFW support:                            no
     Netmap support:                          no
     DAG enabled:                             no
     Napatech enabled:                        no
     WinDivert enabled:                       no
   
     Unix socket enabled:                     yes
     Detection enabled:                       yes
   
     Libmagic support:                        yes
     libnss support:                          yes
     libnspr support:                         yes
     libjansson support:                      yes
     liblzma support:                         yes
     hiredis support:                         no
     hiredis async with libevent:             no
     Prelude support:                         no
     PCRE jit:                                yes
     LUA support:                             no
     libluajit:                               no
     libgeoip:                                yes
     Non-bundled htp:                         no
     Old barnyard2 support:                   no
     Hyperscan support:                       yes
     Libnet support:                          yes
     liblz4 support:                          yes
   
     Rust support:                            yes
     Rust strict mode:                        no
     Rust debug mode:                         no
     Rust compiler:                           rustc 1.33.0
     Rust cargo:                              cargo 1.33.0
   
     Install suricatasc:                      yes
     Install suricata-update:                 yes
   
     Profiling enabled:                       no
     Profiling locks enabled:                 no
   
   Development settings:
     Coccinelle / spatch:                     no
     Unit tests enabled:                      no
     Debug output enabled:                    no
     Debug validation enabled:                no
   
   Generic build parameters:
     Installation prefix:                     /usr
     Configuration directory:                 /etc/suricata/
     Log directory:                           /var/log/suricata/
   
     --prefix                                 /usr
     --sysconfdir                             /etc
     --localstatedir                          /var
     --datarootdir                            /usr/share
   
     Host:                                    x86_64-pc-linux-gnu
     Compiler:                                gcc (exec name) / gcc (real)
     GCC Protect enabled:                     yes
     GCC march native enabled:                yes
     GCC Profile enabled:                     no
     Position Independent Executable enabled: no
     CFLAGS                                   -g -O2 -march=native -I${srcdir}/../rust/gen/c-headers
     PCAP_CFLAGS                               -I/usr/local/include
     SECCFLAGS                                -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security