Suricata Crashing After Several Restarts Without Machine Reboot


I’ve noticed an oddity where if Suricata 6 is restarted on my machine a few times without a machine reboot; it will eventually crash with the exact same error every time. It is not possible to predict when this crash will happen, and since the machine monitors 10Gbps++ consistently it’s not practical to run in debug mode as that drags performance significantly. I suppose this is more of an FYI than a request for help.

This is the error, same memory references every time. Once machine is restarted, Suricata will run forever without issues, a guess is memory corruption but I don’t know.

From the core dump…

Cannot access memory at address 0x7ff7f3662128
Cannot access memory at address 0x7ff7f3662120
Failed to read a valid object file image from memory.
Core was generated by `/opt/suricata/bin/suricata -D --pfring-int fbcard:0:a00 --pfring-cluster-id 1 -’.
Program terminated with signal 11, Segmentation fault.
#0 0x00007ff7efc62c4d in ?? ()

If you can rerun with debug on smaller pipe and have some useful info the core - it help revel a bit more i think.

I wish I could, unfortunately no, however I am looking forward to the
fuzzing presentation in anticipation of one day being able to help more.

EDU is not Corporate - our budgets do not generally allow for dev
servers; everything I do, including changes and updates, is on
production - makes life interesting! :stuck_out_tongue: