Snort mailing list archives
Re: Snort 2.8.4.1 with snortsam on 64bit segfault
From: Frank Knobbe <frank () knobbe us>
Date: Sat, 29 Aug 2009 15:59:16 -0500
On Wed, 2009-08-26 at 11:24 -0400, Gary Pitman wrote:
I have Snort running on RHEL5 64bit and after patching for snortsam it will only run for about 5-10 seconds before getting a segfault. The strange thing is that I have had the problem of Snort not being able to start when adding the "output fwsam" line previously because the patch was not used correctly, but now it does start but then dies. I do see that the patch added the 3 spo_alert_fwsam.* files in the src/output-plugins directory so I am assuming the patch ran correctly. I am wondering if the patch is not 64bit friendly. Has anyone had success with this version on x64?
Yeah, as Luis mentioned, your Snortsam patch probably doesn't have the TwoFish routines that work on 64 bit. The Snortsam patch to Snort will have created the files twofish.c and twofish.h in the /src dir. Replace these with http://www.knobbe.us/twofish.c and twofish.h. It appears that the Snortsam web site over at Emerging Threats hasn't been update well, so I'll take the project incl web site over again soon. Can't promise lots of support, but at least the files will all be current and available then. Regards, Frank -- It is said that the Internet is a public utility. As such, it is best compared to a sewer. A big, fat pipe with a bunch of crap sloshing against your ports.
Attachment:
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.8.4.1 with snortsam on 64bit segfault Gary Pitman (Aug 26)
- Re: Snort 2.8.4.1 with snortsam on 64bit segfault Luis Daniel Lucio Quiroz (Aug 29)
- Re: Snort 2.8.4.1 with snortsam on 64bit segfault Frank Knobbe (Aug 29)
- Re: Snort 2.8.4.1 with snortsam on 64bit segfault Gary Pitman (Aug 31)
- Re: Snort 2.8.4.1 with snortsam on 64bit segfault Frank Knobbe (Aug 31)
- Re: Snort 2.8.4.1 with snortsam on 64bit segfault Gary Pitman (Sep 01)
- Re: Snort 2.8.4.1 with snortsam on 64bit segfault Gary Pitman (Aug 31)