core dump problem.

[g.carabetta () abi it]

Hi all.
Every time I try to upgrade Snort from 1.7 I got a core dump. Snort stay up 
for some minutes and crashes.

Last try:
Version 1.8-RELEASE (Build 43)

# gdb snort core
GNU gdb 5.0rh-5 Red Hat Linux 7.1
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
Core was generated by `/usr/sbin/snort -A full -c /etc/snort/snort.conf -D 
-I -s -C -b -L snort'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/i686/libm.so.6...done.
Loaded symbols for /lib/i686/libm.so.6
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /usr/lib/libssl.so.1...done.
Loaded symbols for /usr/lib/libssl.so.1
Reading symbols from /usr/lib/libcrypto.so.1...done.
Loaded symbols for /usr/lib/libcrypto.so.1
Reading symbols from /lib/i686/libc.so.6...done.
Loaded symbols for /lib/i686/libc.so.6
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_nisplus.so.2...done.
Loaded symbols for /lib/libnss_nisplus.so.2
#0  0x08052981 in mSearch (
    buf=0x402a26d0 
"\205ãO\021xÔÚ\235\030ø\217R\233Pû\005¾\220\236l[±\017ú\177Ù?qý 
|¯ô\235\236\211í_­ø{\016)\234ja¸\201ã£\200¡F>Ë\e\230SÅG\024±nk\233\016©âdí\027\e¹J\0255q\2074t\213?\001ñ!ð¿<q<0ð0Ì1\030·*\230l\r<$(,7\"ss§\204\222¥ÍN£¦©Ô\2255Zju=¥Z­G\223å\233\177\aÛë>!þË\227í3Kö\233K\210¯?ãëý\026×þ|þ\200\212öo\røoÆ\226\032Ä?ØÚ\226¥¦Ëöo³Ãyqiyö[K¯ùü?lû`\a·=«í("...,
    blen=64290, ptrn=0x8568ef8 "uid=0(root)", plen=11, skip=0x8568f08, 
shift=0x8569310) at mstring.c:506
506             }
(gdb) bt
#0  0x08052981 in mSearch (
    buf=0x402a26d0 
"\205ãO\021xÔÚ\235\030ø\217R\233Pû\005¾\220\236l[±\017ú\177Ù?qý 
|¯ô\235\236\211í_­ø{\016)\234ja¸\201ã£\200¡F>Ë\e\230SÅG\024±nk\233\016©âdí\027\e¹J\0255q\2074t\213?\001ñ!ð¿<q<0ð0Ì1\030·*\230l\r<$(,7\"ss§\204\222¥ÍN£¦©Ô\2255Zju=¥Z­G\223å\233\177\aÛë>!þË\227í3Kö\233K\210¯?ãëý\026×þ|þ\200\212öo\røoÆ\226\032Ä?ØÚ\226¥¦Ëöo³Ãyqiyö[K¯ùü?lû`\a·=«í("...,
    blen=64290, ptrn=0x8568ef8 "uid=0(root)", plen=11, skip=0x8568f08, 
shift=0x8569310) at mstring.c:506
#1  0x08058a9f in CheckANDPatternMatch (p=0xbffff370, otn_idx=0x85683c8, 
fp_list=0x8569340) at sp_pattern_match.c:754
#2  0x08058f59 in CheckTcpFlags (p=0xbffff370, otn_idx=0x85683c8, 
fp_list=0x8568e98) at sp_tcp_flag_check.c:238
#3  0x0805614f in EvalOpts (List=0x85683c8, p=0xbffff370) at rules.c:4026
#4  0x08055e89 in EvalHeader (rtn_idx=0x80facf0, p=0xbffff370) at rules.c:3745
#5  0x08055e14 in EvalPacket (List=0x809ed18, mode=2, p=0xbffff370) at 
rules.c:3673
#6  0x08055c90 in Detect (p=0xbffff370) at rules.c:3565
#7  0x08055ac7 in Preprocess (p=0xbffff370) at rules.c:3433
#8  0x0804b4ff in ProcessPacket (user=0x0, pkthdr=0xbffff860, 
pkt=0x402a2682 "") at snort.c:512
#9  0x08077426 in packet_ring_recv () at eval.c:41
#10 0x0807774f in pcap_read () at eval.c:41
#11 0x080783ff in pcap_loop () at eval.c:41
#12 0x0804c8b0 in InterfaceThread (arg=0x0) at snort.c:1441
#13 0x0804b3cf in main (argc=12, argv=0xbffffab4) at snort.c:445
#14 0x40162177 in __libc_start_main (main=0x804ad70 <main>, argc=12, 
ubp_av=0xbffffab4, init=0x804a23c <_init>,
    fini=0x8081df0 <_fini>, rtld_fini=0x4000e184 <_dl_fini>, 
stack_end=0xbffffaac) at ../sysdeps/generic/libc-start.c:129



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users