Hanging at reboot: stopping suricata

Started by eponymous, January 08, 2022, 05:20:57 PM

Previous topic - Next topic
Hi,

21.7.7 install has been running for about a week and I noticed no alerts were going to either my syslog  server and the alerts gui tab. I did notice some warnings in the syslog about "flowbits checked but not set" - anything to worry about?

However main problem is I just tried restarting the system and it's currently hanging at the:

Stopping suricata.
Waiting for PIDS: 75072

I've confirmed this is the suricata PID and I can see the CPU usage is constantly at 100%.

I tried removing the WAN interface cable but it still hangs.

I don't want to pull the plug as that will risk data corruption.

I still have web access but I initiated the reboot from the console so I don't think I have any cli access.

Anything else I can try?

Ok so I got it to reboot by enabling SSH temporarily, and then doing a kill -9 on the Suricata PID. That allowed the reboot to go through. Still no idea why it was hanging though...