Snort mailing list archives

RE: Snort Faulting in ntdll.dll


From: "Michael Steele" <michaels () silicondefense com>
Date: Mon, 4 Nov 2002 15:51:45 -0800

Ian,

This looks like the same message, dated back June 7th, 2002

http://archives.neohapsis.com/archives/snort/2002-06/0096.html

Is this something unresolved, from that far back?

-Michael
-- 
 Michael Steele | System Engineer / Support Technician     
 mailto:michaels () silicondefense com    
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Parker,
Ian
Sent: Monday, November 04, 2002 3:07 PM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] Snort Faulting in ntdll.dll

I have Snort V1.8.7 with MySQL and flexible response support on a
Windows XP
box with SP1. When logging in binary mode, I get the following error in
the
Application log: 

Faulting application snort.exe, version 0.0.0.0, faulting module
ntdll.dll,
version 5.1.2600.1106, fault address 0x00001baa.

Reading back the binary file shows that Snort logged one packet before
the
failure, after which it received a signal to exit.

Has anyone else seen this problem?


Ian Parker, GCWN

Senior Systems Analyst
Upgrading Plant Computing
Syncrude Canada Ltd

(780)790-4631
parker.ian () syncrude com



-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: