Project

General

Profile

Actions

Bug #3654

closed

Rules reload with Napatech can hang Suricata UNIX manager process

Added by Jeff Lucovsky almost 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
low
Difficulty:
medium
Label:
Needs backport to 5.0

Description

When reloading rules using `suricatasc`, the UNIX manager can hang. This reproduces on a 5.0.2 system with various Napatech NICs.

This is where the hang occurs.


Related issues 1 (0 open1 closed)

Copied to Suricata - Bug #3669: Rules reload with Napatech can hang Suricata UNIX manager processClosedJeff LucovskyActions
Actions #1

Updated by Jeff Lucovsky almost 4 years ago

  • Target version set to 6.0.0beta1
  • Effort set to low
  • Difficulty set to medium
  • Label Needs backport to 5.0 added
Actions #2

Updated by Jeff Lucovsky almost 4 years ago

When reloading rules using `suricatasc`, the UNIX manager can hang. This reproduces on a 5.0.2 system with various Napatech NICs.

This is where the hang occurs: https://github.com/OISF/suricata/blob/master/src/detect-engine.c#L1850:L1861

The issue occurs because the Napatech packet source isn't invoking `TmThreadsCaptureHandleTimeout` when there are no packets to process (that is, when "get next packet" results in a timeout).

Actions #3

Updated by Jeff Lucovsky almost 4 years ago

  • Subject changed from Rules reload with Napatech can hang Suricata UNIX managre process to Rules reload with Napatech can hang Suricata UNIX manager process
Actions #4

Updated by Jeff Lucovsky almost 4 years ago

  • Copied to Bug #3669: Rules reload with Napatech can hang Suricata UNIX manager process added
Actions #5

Updated by Jeff Lucovsky almost 4 years ago

  • Status changed from New to In Review
  • Assignee set to Jeff Lucovsky
Actions #6

Updated by Jeff Lucovsky almost 4 years ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF