[Snort-devel] Re: [Snort-users] Segfault on fun funy rule

From: Erek Adams <erek(at)snort.org>
Date: Thu Feb 26 2004 - 01:13:38 EST

[...comments inline...]

On Wed, 25 Feb 2004, Jason Monroe "JC" wrote:

> Downloaded 2.1.1 built it against Fedora Core 1

[...snip...]

> Have rule in local.rules that causes breakage

Good. :) Don't type that. :)

Your problem below isn't the same--It's different.

> I looked at the FAQ said DO GDB so here it is

[...snip...]

> (gdb) run snort -T -v -c /etc/snort/snort.conf

Makes perfect sense. :)

Instead of "run snort ...." try just "run <options>" without the word 'snort'. Libpcap is seeing that and trying to interpret it as a BPF style filter, hence the syntax error with OpenPcap.

Cheers!

---

Erek Adams

 "It looks just like a Telefunken U-47. You'll love it..." -- Frank Zappa

---

SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Thu Feb 26 01:19:42 2004