Re: [Snort-devel] Whee, Coredump

From: Roy S. Rapoport <snort-devel(at)ols.inorganic.org>
Date: Sat May 31 2003 - 17:33:46 EDT

On Sat, May 31, 2003 at 09:28:11AM -0400, Erek Adams wrote:
> Ok maybe I'm just a bit crazy, but _why_ would you ever need a config file

Don't look at it as "Oh my God, it's a 500Kb file how do you manage it." Look at it as moving the management of the Snort components away from the file level. Remember, SnortCenter basically gives you a pretty web interface to handle all the components of the Snort Configuration -- you should, theoretically, never have to look at the actual config file.

Unless, you know, SnortCenter is b0rken.

> On to the problem. Rebuild snort with --enable-debug. That wil give you

Done. As Brian suspected, the issue arises from a broken rule. Snort probably *still* shouldn't segfault as a result of a broken rule. I mean, as I understand it, good code *never* segfaults.

-roy

---

This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Sat May 31 17:36:09 2003