hello,
I am trying to build Snort2.9.8.2 with Hyperscan patch,and snort with hyerscan works
fine for the first time;
Howerver, when I send a SIGHUP SIGNAL to restart snort's process,the process will
reload its config(snort.conf) and report a error:
$ killall -1 snort
snort output:
[ Port Based Pattern Matching Memory ]
+--[ Intel Hyperscan Summary ]--------------------------------
| Hyperscan version : 4.3.0 2016-12-02
| Number of databases : 470
| Memory (MB) : 5.72
| Scratch (KB) : 5.12
+-------------------------------------------------------------
Session Reload: Reference Count Non-zero for old configuration.
--== Reload Complete ==--
ERROR: hs_scan() failed: error -1
Fatal Error, Quitting..
I got stuck in this error,maybe I miss something?
Thanks in advance for your help!
Show replies by date
Hi there,
Thanks for the bug report.
You're quite right - it looks like the handling for Hyperscan scratch regions is not
safe when the config is being reloaded by the reload thread. I will look into this further
and fix it in a new version of the Hyperscan Snort patch.
Best regards,
Justin
From: Hyperscan [mailto:hyperscan-bounces@lists.01.org] On Behalf Of ????
Sent: Thursday, December 22, 2016 5:18 PM
To: hyperscan <hyperscan(a)lists.01.org>
Subject: [Hyperscan] Hyperscan snort patch : snort-2982-hyperscan-v2.tar.gz
hello,
I am trying to build Snort2.9.8.2 with Hyperscan patch,and snort with hyerscan works
fine for the first time;
Howerver, when I send a SIGHUP SIGNAL to restart snort's process,the process will
reload its config(snort.conf) and report a error:
$ killall -1 snort
snort output:
[ Port Based Pattern Matching Memory ]
+--[ Intel Hyperscan Summary ]--------------------------------
| Hyperscan version : 4.3.0 2016-12-02
| Number of databases : 470
| Memory (MB) : 5.72
| Scratch (KB) : 5.12
+-------------------------------------------------------------
Session Reload: Reference Count Non-zero for old configuration.
--== Reload Complete ==--
ERROR: hs_scan() failed: error -1
Fatal Error, Quitting..
I got stuck in this error,maybe I miss something?
Thanks in advance for your help!