Snort mailing list archives

Snort-inline segfault


From: Katriel Traum <katriel () traum org il>
Date: Wed, 5 Feb 2003 08:48:26 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello list,

I've been trying to use snort as a GIDS with snort-inline.
When trying to run snort in inline mode (-Q) along side with tcpdump logging 
(-b), I get a segfault (same goes when trying 
output log_tcpdump: /var/log/snort/tcpdump.log)
I've run it through "gdb", and found out that it segfaults at a function 
called pcap_dump_open(), which after checking is the function that opens the 
pcap dump file.
When running snort-inline with only -b or only -Q, nothing happens.

Has anyone seen or experienced something like this?

Thanks,
- -- 
+katriel                                                כתריאל+
pgp key: traum.org.il/gpg.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+QM/dDWy+Hv/461sRAkKwAJ4+B0yqBmq8xGVD/6CPGPCh/HrHYwCgok7g
2+9FsDvalQ1GmvurcDBofYM=
=rknp
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: