Project

General

Profile

Bug #6499

Updated by Victor Julien 6 months ago

I use trex v2.97 to test suricata v7.0.2 and found some problems. 

 1. The tcp.active_sessions and flow.active count in stats.log will never reduce to zero after trex stop. 

 The trex command: 

 <pre><code class="shell"> ```sh 
 ./t-rex-64 -f cap2/many_client_example.yaml -d 300 -p -m 30000 
 </code></pre> ``` 

 2. Sometimes the tcp.active_sessions will be a very big number at startup, looks like the int has overflow. 

 <pre> ``` 
 ------------------------------------------------------------------------------------ 
 Date: 11/7/2023 -- 15:02:49 (uptime: 0d, 00h 03m 39s) 
 ------------------------------------------------------------------------------------ 
 Counter                                         | TM Name                     | Value 
 ------------------------------------------------------------------------------------ 
 capture.kernel_packets                          | Total                       | 18 
 capture.afpacket.polls                          | Total                       | 28592 
 capture.afpacket.poll_timeout                   | Total                       | 28592 
 tcp.active_sessions                             | Total                       | 18446744073709465109 
 flow.active                                     | Total                       | 18446744073709465109 
 flow.end.state.closed                           | Total                       | 86507 
 flow.end.tcp_state.closed                       | Total                       | 86507 
 flow.mgr.full_hash_pass                         | Total                       | 19 
 flow.mgr.rows_per_sec                           | Total                       | 65724 
 flow.spare                                      | Total                       | 702745 
 flow.mgr.rows_maxlen                            | Total                       | 10 
 flow.mgr.flows_checked                          | Total                       | 334237 
 flow.mgr.flows_notimeout                        | Total                       | 107828 
 flow.mgr.flows_timeout                          | Total                       | 226409 
 flow.mgr.flows_evicted                          | Total                       | 231859 
 flow.mgr.flows_evicted_needs_work               | Total                       | 782 
 memcap_pressure                                 | Total                       | 23 
 memcap_pressure_max                             | Total                       | 23 
 flow.recycler.recycled                          | Total                       | 86507 
 flow.recycler.queue_avg                         | Total                       | 142 
 flow.recycler.queue_max                         | Total                       | 26073 
 tcp.memuse                                      | Total                       | 224190400 
 tcp.reassembly_memuse                           | Total                       | 3134808688 
 http.memuse                                     | Total                       | 83106865 
 flow.memuse                                     | Total                       | 293977408 
 </pre> ``` 

Back