[Snort-devel] snort-2.0.1 with mysql and libpcap-0.7.2

From: boka <boka(at)sto-procent.art.pl>
Date: Tue Sep 02 2003 - 08:25:38 EDT

Hi !

My conf is: redhat 7.0 with all previous erratas added, 2.2.25 kernel.

I want to run snort-2.0.1 with mysql and libpcap-0.7.2 to support many interfaces in my machine.

libpcap compiled with following options to configure: ./configure --prefix=/usr/local/libpcap-0.7.2
--exec-prefix=/usr/local/libpcap-0.7.2

snort compiled with following options to configure: ./configure --exec-prefix=/usr --prefix=/usr --sysconfdir=/etc/snort
--with-mysql --with-libpcap-includes=/usr/local/libpcap-0.7.2/include
--with-libpcap-libraries=/usr/local/libpcap-0.7.2/lib

After compilation, i have core dumps when trying to run snort. strace looks like:

[root@peace-for-iraq snort-2.0.1]# strace ./src/snort execve("./src/snort", ["./src/snort"], [/* 25 vars */]) = 0

uname({sys="Linux", node="filtr", ...}) = 0
brk(0)                                  = 0x821dc80
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or 
directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, 0xbfffec0c)                  = -1 ENOSYS (Function not 

implemented)
fstat(3, {st_mode=S_IFREG|0644, st_size=14800, ...}) = 0 old_mmap(NULL, 14800, PROT_READ, MAP_PRIVATE, 3, 0) = 0x127000

close(3)                                = 0

open("/usr/lib/libz.so.1", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\31\0"..., 1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=59906, ...}) = 0

old_mmap(NULL, 55044, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x12b000
mprotect(0x137000, 5892, PROT_NONE)     = 0
old_mmap(0x137000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 
0xb000) = 0x137000
close(3)                                = 0
open("/lib/libm.so.6", O_RDONLY)        = 3

read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340H\0"..., 1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=619298, ...}) = 0

old_mmap(NULL, 142656, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x139000
mprotect(0x15b000, 3392, PROT_NONE)     = 0
old_mmap(0x15b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 
0x21000) = 0x15b000
close(3)                                = 0
open("/lib/libnsl.so.1", O_RDONLY)      = 3

read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200?\0"..., 1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=448433, ...}) = 0

old_mmap(NULL, 92000, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x15c000
mprotect(0x16f000, 14176, PROT_NONE)    = 0
old_mmap(0x16f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 

0x12000) = 0x16f000
old_mmap(0x171000, 5984, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x171000

close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3

read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\304\1"..., 1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=5723959, ...}) = 0

old_mmap(NULL, 1269096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x173000
mprotect(0x2a0000, 36200, PROT_NONE)    = 0
old_mmap(0x2a0000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 

3, 0x12c000) = 0x2a0000
old_mmap(0x2a5000, 15720, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2a5000

close(3)                                = 0

old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2a9000
--- SIGSEGV (Segmentation fault) ---
+++ killed by SIGSEGV +++

greetz
boka

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Tue Sep 2 08:36:55 2003