CPU: PIII, speed 902.217 MHz (estimated) Counted CPU_CLK_UNHALTED events (clocks processor is not halted) with a unit mask of 0x00 (No unit mask) count 100000 samples % linenr info app name symbol name 3569 20.0618 template.c:149 libfirestorm.so.0.0.0 template_match 2015 11.3266 tcp.c:170 tcpip.so tcp_csum 1256 7.0601 mwm.c:639 match_str.so mwmSearchExBC 937 5.2670 match_ip_addr.c:92 tcpip.so ip_src_detect 916 5.1490 ip.c:128 tcpip.so ipv4_decode 781 4.3901 match_ip_addr.c:111 tcpip.so ip_dst_detect 727 4.0866 tcpdump.c:228 capdev_tcpdump.so tcpd_dequeue 707 3.9741 mwm.c:101 match_str.so hbm_match 574 3.2265 pipeline.c:660 libfirestorm.so.0.0.0 dispatch 534 3.0017 match_str.c:404 match_str.so content_match 497 2.7937 sll.c:137 sll.so sll_decode 458 2.5745 tcpstream.c:782 tcpip.so tcpstream_tcpseg 412 2.3159 match_tcp_flow.c:9 tcpip.so flow_match 338 1.8999 tcpstream.c:1404 tcpip.so tcpstream_process 322 1.8100 mwm.c:976 match_str.so mwmSearch 321 1.8044 notifier.c:56 libfirestorm.so.0.0.0 notifier_run 241 1.3547 match_tcp_flags.c:29 tcpip.so flags_match 238 1.3378 elog.c:155 elog.so elog_build_pkt 220 1.2366 tcpstream.c:706 tcpip.so tcp_find 193 1.0849 tcp.c:227 tcpip.so tcp_decode 186 1.0455 pipeline.c:245 libfirestorm.so.0.0.0 inject_packet 180 1.0118 tcpip_fields.c:38 tcpip.so get_tcp_dport 179 1.0062 http.c:372 http.so http_decode_buf 178 1.0006 sensor.c:139 lt-firestorm-nids do_sigs 176 0.9893 tcpdump.c:84 capdev_tcpdump.so read32_swap 144 0.8094 match_ip_frag.c:32 tcpip.so frag_match 141 0.7926 tcpip_fields.c:32 tcpip.so get_tcp_sport 116 0.6521 pipeline.c:79 libfirestorm.so.0.0.0 do_sink 89 0.5003 detect.c:231 libfirestorm.so.0.0.0 detect 69 0.3879 fvec.c:97 libfirestorm.so.0.0.0 vstrcmp 62 0.3485 tcp.c:294 tcpip.so tcp_match 60 0.3373 pipeline.c:270 libfirestorm.so.0.0.0 file_seq_mainloop 58 0.3260 tcp.c:77 tcpip.so tcp_swapbytes 54 0.3035 fobuf.c:26 libfirestorm.so.0.0.0 fobuf_write 52 0.2923 field.c:163 libfirestorm.so.0.0.0 dsize_get 52 0.2923 ip.c:244 tcpip.so ip_match 48 0.2698 match_ip_opts.c:97 tcpip.so ipopt_match 47 0.2642 pipeline.c:115 libfirestorm.so.0.0.0 capdev_dequeue 47 0.2642 fvec.c:31 libfirestorm.so.0.0.0 vcasecmp 38 0.2136 tcpip_fields.c:44 tcpip.so get_tcp_seq 35 0.1967 elog.c:850 elog.so spool_queue 35 0.1967 tcpip_fields.c:140 tcpip.so get_ip_id 33 0.1855 elog.c:100 elog.so elog_write_pkt 32 0.1799 (no location information) libfirestorm.so.0.0.0 anonymous symbol from section .plt 27 0.1518 (no location information) elog.so __udivdi3 24 0.1349 (no location information) match_str.so anonymous symbol from section .plt 22 0.1237 match_ip_opts.c:50 tcpip.so ipopts_get 20 0.1124 tcpstream.c:639 tcpip.so tcp_new 19 0.1068 tcpstream.c:607 tcpip.so tcp_free 16 0.0899 (no location information) tcpip.so anonymous symbol from section .plt 16 0.0899 tcpip_fields.c:122 tcpip.so get_ip_proto 16 0.0899 tcp.c:93 tcpip.so tcp_serialize 15 0.0843 (no location information) elog.so __umoddi3 15 0.0843 elog.c:526 elog.so spool_cond_rotate 15 0.0843 tcpip_fields.c:116 tcpip.so get_ip_ttl 14 0.0787 arp.c:118 arp.so arp_decode 12 0.0675 udp.c:61 tcpip.so udp_decode 11 0.0618 tcpip_fields.c:68 tcpip.so get_udp_sport 11 0.0618 tcpstream.c:495 tcpip.so tcp_syn_options 10 0.0562 elog.c:483 elog.so spool_isempty 10 0.0562 http.c:85 http.so http_proto_version 10 0.0562 smtp.c:54 smtp.so smtp_request_decode 9 0.0506 tcpip_fields.c:74 tcpip.so get_udp_dport 9 0.0506 ipfrag.c:416 tcpip.so ipfrag_queue 9 0.0506 tcpstream.c:447 tcpip.so tcp_fast_options 8 0.0450 (no location information) elog.so anonymous symbol from section .plt 8 0.0450 ipfrag.c:665 tcpip.so ipfrag_process 8 0.0450 tcpstream.c:1329 tcpip.so tcpstream_decode_stream 7 0.0393 elog.c:87 elog.so pad_buffer 7 0.0393 http.c:540 http.so http_request 7 0.0393 pipeline.c:226 libfirestorm.so.0.0.0 alert_token_bucket 7 0.0393 smtp.c:23 smtp.so smtp_sdecode 7 0.0393 (no location information) tcpip.so __udivdi3 6 0.0337 http.c:457 http.so http_sdecode 6 0.0337 firestorm.c:18 libfirestorm.so.0.0.0 token_bucket 5 0.0281 tcpstream.c:751 tcpip.so tcpstream_data 5 0.0281 udp.c:103 tcpip.so udp_match 4 0.0225 tcpip_fields.c:50 tcpip.so get_tcp_ack 3 0.0169 fobuf.c:81 libfirestorm.so.0.0.0 __fobuf_flush 3 0.0169 icmp.c:62 tcpip.so icmp_decode 3 0.0169 ipfrag.c:245 tcpip.so ipfrag_reassemble 3 0.0169 tcpstream.c:1251 tcpip.so tcpstream_decode 2 0.0112 http.c:704 http.so http_decode 2 0.0112 http.c:665 http.so http_response 2 0.0112 mwm.c:82 match_str.so memcmpi 2 0.0112 tcpip_fields.c:80 tcpip.so get_itype 2 0.0112 ipfrag.c:222 tcpip.so ipfrag_csum 1 0.0056 (no location information) http.so anonymous symbol from section .plt 1 0.0056 http.c:141 http.so htype_code 1 0.0056 http.c:113 http.so htype_string 1 0.0056 fdctl.c:134 libfirestorm.so.0.0.0 __fd_write 1 0.0056 fvec.c:11 libfirestorm.so.0.0.0 vtouint 1 0.0056 ipfrag.c:189 tcpip.so ipq_kill