Snort mailing list archives

Spade causing seg fault


From: Sash <sashwhan () yahoo com>
Date: Tue, 24 Jul 2001 18:42:58 -0700 (PDT)

Hi,

Just some feedback I thought may help.  I`m having
problems with Spade dumping it's core in Snort
v1.8.1b4.  To be honest, I'm not sure when this
started.  Below is a debug trace.  I apologise that I
haven't investigated further.

Sasha

-------------
bash-2.03# ./snort -V 
-*> Snort! <*-
Version 1.8.1-beta4 (Build 54)
By Martin Roesch (roesch () sourcefire com,
www.snort.org)
bash-2.03# uname -a
SunOS ids01 5.8 Generic_108528-06 sun4u sparc
SUNW,UltraAX-i2
-------------

preprocessor spade: -1 $SPADEDIR/spade.rcv
$SPADEDIR/log.txt 3 50000
preprocessor spade-homenet: $HOME_NET
preprocessor spade-adapt: 20 2 0.5
preprocessor spade-adapt2: 0.01 15 4 24 7
preprocessor spade-threshlearn: 200 24
preprocessor spade-survey:  $SPADEDIR/survey.txt 60
preprocessor spade-stats: entropy uncondprob condprob

--------------


GNU gdb 5.0
Copyright 2000 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General
Public License, and you are
welcome to change it and/or distribute copies of it
under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show
warranty" for details.
This GDB was configured as "sparc-sun-solaris2.8"...
Core was generated by `/usr/local/taipan/bin/snort -i
dmfe1 -l /var/log/taipan -G basic -DNvoc /usr/lo'.
Program terminated with signal 11, Segmentation Fault.
Reading symbols from /usr/lib/libm.so.1...done.
Loaded symbols for /usr/lib/libm.so.1
Reading symbols from /usr/lib/libsocket.so.1...done.
Loaded symbols for /usr/lib/libsocket.so.1
Reading symbols from /usr/lib/libnsl.so.1...done.
Loaded symbols for /usr/lib/libnsl.so.1
Reading symbols from /usr/lib/libc.so.1...done.
Loaded symbols for /usr/lib/libc.so.1
Reading symbols from /usr/lib/libdl.so.1...done.
Loaded symbols for /usr/lib/libdl.so.1
Reading symbols from /usr/lib/libmp.so.2...done.
Loaded symbols for /usr/lib/libmp.so.2
Reading symbols from
/usr/platform/SUNW,UltraAX-i2/lib/libc_psr.so.1...done.
Loaded symbols for
/usr/platform/SUNW,UltraAX-i2/lib/libc_psr.so.1
Reading symbols from /usr/lib/nss_nis.so.1...done.
Loaded symbols for /usr/lib/nss_nis.so.1
Reading symbols from /usr/lib/nss_files.so.1...done.
Loaded symbols for /usr/lib/nss_files.so.1
#0  0x543f4 in survey_ostat (loc=1) at
spp_anomsensor.c:1432
1432    spp_anomsensor.c: No such file or directory.
(gdb) where
#0  0x543f4 in survey_ostat (loc=1) at
spp_anomsensor.c:1432
#1  0x3e094 in Preprocess (p=0xffbef680) at
rules.c:3427
#2  0x31c4c in ProcessPacket (user=0x0,
pkthdr=0x18b400, pkt=0x192522 "")
    at snort.c:512
#3  0x6650c in pcap_read ()
#4  0x67140 in pcap_loop ()
#5  0x332f0 in InterfaceThread (arg=0x18b738) at
snort.c:1441
#6  0x31ae8 in main (argc=1619768, argv=0xffbefd7c) at
snort.c:445






__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: