Project

General

Profile

Actions

Bug #5417

closed

flow memory leak

Added by eric fool almost 2 years ago. Updated over 1 year ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:

Description

when I user t-rex tester make http traffic crossing suricata, most of the flow created by suricata always can not time out. These traffic can be processd normally by netfilter conntract, and all conntrackt can time out nomally.
I found it result by FlowForceReassemblyForFlow(f, server, client) called in FlowManagerFlowTimedOut(Flow *f, struct timeval *ts), the FlowForceReassemblyForFlow will product some pseudo packets and inject them to tv->stream_pq.
But these packets who referent to flow will always can not be released from tv->stream_pq until the surcata thread end in TmThreadTimeoutLoop.
So if the suricata worker thread not end all the flows can not be time out because who referent count using by these pseudo packets.

Why suricata does that as above?


Related issues 1 (0 open1 closed)

Related to Suricata - Bug #5418: http app memory leak RejectedActions
Actions

Also available in: Atom PDF