Re: [Snort-devel] Snort 2.0 Segmentation Fault

From: Juan Manzano <manzano_juan(at)hotmail.com>
Date: Fri Apr 25 2003 - 09:41:07 EDT

Hi Chris,

Thank you very much for your help. Here is the BUGS forms filled:

System Architecture:
Alpha EV56 (AlphaServer 4100, 2 CPUs)

Operating System and version:
RedHat Linux 7.2 for Alpha (Kernel 2.4.9-32.5smp)

Version of Snort:
Snort-2.0.0

Preprocessors loaded:
None. After the first time the error appeared, I tried to isolate the problem, commenting one by one all the preprocessors. Now, there is none loaded.

Rules used:

	include $RULE_PATH/web-cgi.rules
	include $RULE_PATH/web-coldfusion.rules
	include $RULE_PATH/web-iis.rules
	include $RULE_PATH/web-frontpage.rules
	include $RULE_PATH/web-misc.rules
	include $RULE_PATH/web-client.rules
	include $RULE_PATH/web-php.rules

Output plug-ins you loaded:
Initially

        output database: log, mysql
after the error, I changed it to

        output alert_csv: ./snort.csv msg,proto,timestamp,src,srcport,dst,dstport

Command line switches used:
-i eth1 -l /root/snort2/ -c /root/snort2/etc/snortconf.conf dst net 10.1.249.128 mask 255.255.255.224 and
not host 10.1.249.129

Snort error messages displayed:
10681 Segmentation fault /root/snort2/snort -i eth1 -l /root/snort2/ -c /root/snort2/etc/snortconf.conf dst net 10.1.249.128 mask 255.255.255.224 and not host 10.1.249.129

Core Dumped: No. Also, I builded a debugging-enabled snort but the error still appears, its message stays the same and there is no core dumped.

Again thanks,

Juan

>From: Chris Green <cmg@sourcefire.com>

---

MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Fri Apr 25 11:58:18 2003