Re: flexresp2 is back and needs testing

[Jeff Nathan <jeff () snort org>]

Erg..

Sorry about that.  Try the attached patch (version 1.0.2) instead, OK?

-Jeff

Attachment: sp_respond2.diff.gz
Description:

Attachment: sp_respond2.diff.gz.asc
Description:

On Sep 8, 2004, at 8:58 PM, Pedro Fortuna wrote:

> Jeff, I did, I used the sp_respond2.diff.gz you sent today directly to
> my (other) mail box (pfeito_at_netcabo.pt) and to other 6 or 7 guys.
>
> I'm going to repeat the process as I type this e-mail:
>
> Installation (you can see filesize and confirm that it is version 
> 1.0.1):
> -rw-r--r--  1 root root  16414 Sep  9 02:55 sp_respond2.diff.gz
>
> # gzip -d sp_respond2.diff.gz
>
> -rw-r--r--  1 root root  66323 Sep  9 02:55 sp_respond2.diff
>
> # patch –p0 < sp_respond2.diff
> patching file configure.in
> patching file doc/Makefile.am
> patching file doc/README.FLEXRESP2
> patching file src/parser.c
> patching file src/plugbase.c
> patching file src/snort.h
> patching file src/detection-plugins/Makefile.am
> patching file src/detection-plugins/sp_react.c
> patching file src/detection-plugins/sp_react.h
> patching file src/detection-plugins/sp_respond.c
> patching file src/detection-plugins/sp_respond.h
> patching file src/detection-plugins/sp_respond2.c
> patching file src/detection-plugins/sp_respond2.h
>
> # aclocal
> # autoheader
> # automake
> # autoconf
>
> # ./configure --with-mysql=/usr/local/mysql --enable-flexresp2
> # make
> # make install
> # /etc/init.d/snort start
> # grep "sp_respond" /var/log/messages
> Sep  9 03:08:29 paco snort: FATAL ERROR: sp_respond2: Unable to
> allocate hash table memory.
>
> And Snort stops running.
> I didnt saw this problem on the previous version that you sent me 2 or
> 3 weeks ago.
>
> Any clues?
>
> Best Regards,
> Pedro Fortuna

--
The original EZ-bake packet oven.
http://nemesis.sourceforge.net

Attachment: PGP.sig
Description: This is a digitally signed message part