Suricata

[9078] 20/7/2013 -- 20:59:07 - (tm-threads.c:2165) <Info> (TmThreadWaitOnThreadInit) -- all 8 packet processing threads, 3 management threads initialized, engine started.
[9083] 20/7/2013 -- 20:59:07 - (source-af-packet.c:1186) <Info> (AFPComputeRingParams) -- AF_PACKET RX Ring params: block_size=32768 block_nr=103 frame_size=1584 frame_nr=2060
[9083] 20/7/2013 -- 20:59:07 - (source-af-packet.c:1374) <Info> (AFPCreateSocket) -- Using interface 'eth2' via socket 7
[9083] 20/7/2013 -- 20:59:07 - (source-af-packet.c:985) <Info> (ReceiveAFPLoop) -- Thread RxAFPeth21 using socket 7
[9084] 20/7/2013 -- 20:59:07 - (source-af-packet.c:1186) <Info> (AFPComputeRingParams) -- AF_PACKET RX Ring params: block_size=32768 block_nr=103 frame_size=1584 frame_nr=2060
[9084] 20/7/2013 -- 20:59:07 - (source-af-packet.c:1374) <Info> (AFPCreateSocket) -- Using interface 'eth3' via socket 8
[9084] 20/7/2013 -- 20:59:07 - (source-af-packet.c:439) <Info> (AFPPeersListReachedInc) -- All AFP capture threads are running.
[9084] 20/7/2013 -- 20:59:07 - (source-af-packet.c:985) <Info> (ReceiveAFPLoop) -- Thread RxAFPeth31 using socket 8
Segmentation fault (core dumped)

bt:

Core was generated by `suricata --af-packet -S /dev/null'.
Program terminated with signal 11, Segmentation fault.
#0  AFPDerefSocket (peer=0x0) at source-af-packet.c:887
887         if (SC_ATOMIC_SUB(peer->sock_usage, 1) == 0) {
(gdb) bt
#0  AFPDerefSocket (peer=0x0) at source-af-packet.c:887
#1  0x00000000004f137a in AFPReleaseDataFromRing (p=0x281fd80) at source-af-packet.c:676
#2  0x00000000004f13c9 in AFPReleasePacket (p=0x281fd80) at source-af-packet.c:691
#3  0x000000000050ead4 in TmThreadsSlotVar (td=0x2f8f2a0) at tm-threads.c:797
#4  0x00007fc3b48fee9a in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0
#5  0x00007fc3b41cdccd in clone () from /lib/x86_64-linux-gnu/libc.so.6
#6  0x0000000000000000 in ?? ()

yaml:

af-packet:
  - interface: eth2
    threads: 1
    cluster-id: 1
    cluster-type: cluster_flow
    defrag: yes
    use-mmap: yes
  - interface: eth3
    threads: 1
    cluster-id: 2
    cluster-type: cluster_flow
    defrag: yes
    use-mmap: yes
  - interface: default
    #threads: 2
    #use-mmap: yes

ifconfig:

eth2      Link encap:Ethernet  HWaddr 90:e2:ba:3a:25:f8  
          UP BROADCAST RUNNING NOARP PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:386913 errors:0 dropped:270769 overruns:0 frame:0
          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:147311709 (147.3 MB)  TX bytes:210 (210.0 B)

eth3      Link encap:Ethernet  HWaddr 90:e2:ba:3a:25:f9  
          UP BROADCAST RUNNING NOARP PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:347367813 errors:1649383 dropped:45 overruns:0 frame:1649383
          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:131777506530 (131.7 GB)  TX bytes:210 (210.0 B)

Latest master: 2.0dev (rev 055b422)