Problem with shutdown/reboot as killing suricata gets stuck forever.

[franco]

Ok, let's give it a few days. Thanks for testing so far!


Cheers,
Franco

[caplam]

the least i can do given the effort you put in it.

[mrzaz]

Hi franc and others,

Unfortunatly it hang with 8.0.5_2 suricata and only kill -9 kills it.

suricata   8.0.5_2   59.3MiB   unknown-repository   GPLv2   High Performance Network IDS, IPS and Security Monitoring engine

root@OPNsense:~ # uptime
 5:21PM  up 2 days,  8:40, 2 users, load averages: 0.72, 0.49, 0.54

Running "Divert (UPS)".

Any other ideas what to modify and try again ?  Maybe another "black" fix in suricata ?
 
//Dan Lundqvist

//Dan Lundqvist

[mrzaz]

Just for info.
Upgraded to latest but it still hanged as before not able to shut down unless kill -9 <suricata process>
It is still running suricata   8.0.5_2   59.3MiB   unknown-repository   GPLv2   High Performance Network IDS, IPS and Security Monitoring engine

//Dan Lundqvist

[franco]

Okay, thanks. All of this feels like it doesn't propagate the exit. Next step would be for me to try and reproduce the behaviour but so far no luck.

How much traffic are you pushing into suricata?


Cheers,
Franco

[mrzaz]

I have some dynamic data where most of the time it is limited but at certain times I run backups from Synology to external systems
and at other times I have a friend who backups to my storage.

Unfortunatley I had to revert to non-VM now as I hade a lot of other issues caused me to pause the Unraid and use same machine
as standalone OpnSense.  I will check if I still get same issue.

I do have 1000/1000 connection and at times both runs much UL and sometimes much DL to system that has similar speeds as me.

//Dan Lundqvist