segfault at 0 ip 0000000000000000 sp 00007fff94ff5878 error 14 in suricata[400000+8be000]
I get the following error and suricata gives a segmentation fault. I am running suricata in IPS mode in af-packet.
This is Suricata version 5.0.0-dev (f43584661 2019-08-23). Using Intel X710 NIC cards.
Linux suricata-teletalk 4.19.0-0.bpo.5-amd64 #1 SMP Debian 4.19.37-5+deb10u2~bpo9+1 (2019-08-16) x86_64 GNU/Linux
kernel: [15032.337542] W#04-enp176s0f117422: segfault at 0 ip 0000000000000000 sp 00007fff94ff5878 error 14 in suricata[400000+8be000]
kernel: [15032.337550] Code: Bad RIP value.
I did a gdb trace and here is what I see:
#0 0x00007ffff2fbd28d in nanosleep () at ../sysdeps/unix/syscall-template.S:84
#1 0x00007ffff2fe6dc4 in usleep (useconds=<optimized out>) at ../sysdeps/posix/usleep.c:32
#2 0x00000000006a55ca in SuricataMainLoop (suri=<optimized out>) at suricata.c:2874
#3 main (argc=<optimized out>, argv=<optimized out>) at suricata.c:3025
Thanks and Regards,
Updated by Srijan Nandi 9 months ago
I did 5 installations of 5.0.0-dev on Debian 9 and did not face this issue. On the 6th installation of 5.0.0-dev on Debian 9, I encountered this issue.
Because I was in a hurry, replaced the OS to Ubuntu -18.04 and changed suricata to 4.1.4 (Stable Release) and it started working without an issue.
Therefore, I am not sure whether it can be reproducible at will or not.