https://redmine.openinfosecfoundation.org/
https://redmine.openinfosecfoundation.org/favicon.ico?1701117002
2020-11-19T14:18:53Z
Open Information Security Foundation
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=18463
2020-11-19T14:18:53Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Related to</strong> <i><a class="issue tracker-1 status-5 priority-4 priority-default closed" href="/issues/4124">Bug #4124</a>: dcerpc: UDP request response pair match is incorrect</i> added</li></ul>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=18510
2020-11-19T22:16:44Z
Peter Manev
petermanev@gmail.com
<ul></ul><p>With the latest code merges - this is in live testing currently.<br />(7b4ac8dba 2020-11-19)</p>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=18545
2020-11-22T09:28:50Z
Peter Manev
petermanev@gmail.com
<ul></ul><p>Still seeing this. trying a different investigation approach.<br /><pre>
- 46.94% 46.94% suricata [.] suricata::dcerpc::dcerpc_udp::DCERPCUDPState::handle_fragment_data
38.97% suricata::dcerpc::dcerpc_udp::DCERPCUDPState::handle_fragment_data
- 44.65% 0.06% suricata [.] AFPWalkBlock
7.22% AFPWalkBlock
- 44.57% 0.52% suricata [.] AFPParsePacketV3
- 6.93% AFPParsePacketV3
- 6.94% TmThreadsSlotProcessPkt
- 7.19% TmThreadsSlotVarRun
- 7.01% FlowWorker
- 3.96% Detect
- 4.00% DetectFlow
- 5.57% DetectRun
- 3.73% DetectRunPrefilterPkt
- 3.11% Prefilter
- 2.38% PrefilterPktPayload
- 2.35% SCHSSearch
- 2.60% avx512_hs_scan
- 5.37% 0x7f7bb8b5cb85
2.06% 0x7f7bb8b24ee6
0.91% 0x7f7bb8b24f36
- 1.39% 0x7f7bb8b5cb0c
- 5.61% 0x7f7bb8a6da21
</pre></p>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=19083
2021-01-22T14:39:33Z
Shivani Bhardwaj
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Assigned</i></li><li><strong>Assignee</strong> set to <i>Shivani Bhardwaj</i></li><li><strong>Priority</strong> changed from <i>Normal</i> to <i>High</i></li><li><strong>Target version</strong> set to <i>6.0.2</i></li></ul>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=19119
2021-01-30T14:51:32Z
Victor Julien
victor@inliniac.net
<ul><li><strong>Target version</strong> changed from <i>6.0.2</i> to <i>7.0.0-beta1</i></li><li><strong>Label</strong> <i>Needs backport to 6.0</i> added</li></ul>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=19195
2021-02-03T13:55:27Z
Jeff Lucovsky
<ul><li><strong>Copied to</strong> <i><a class="issue tracker-1 status-5 priority-5 priority-high3 closed" href="/issues/4315">Bug #4315</a>: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads </i> added</li></ul>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=19375
2021-02-22T14:27:44Z
Shivani Bhardwaj
<ul></ul><p>Closed by: <a class="external" href="https://github.com/OISF/suricata/pull/5891">https://github.com/OISF/suricata/pull/5891</a></p>
Suricata - Bug #4080: DCERPCUDPState handle fragmented data functions pegging certain CPU cores/threads
https://redmine.openinfosecfoundation.org/issues/4080?journal_id=19376
2021-02-22T14:29:12Z
Shivani Bhardwaj
<ul><li><strong>Status</strong> changed from <i>Assigned</i> to <i>Closed</i></li></ul>