Re: snort v2.9.0.4 Fedora 14 Segmentation Fault

[Joel Esler <jesler () sourcefire com>]

If you all are experiencing bugs in Snort, please read this:

http://www.snort.org/snort-downloads/submit-a-bug

That'll allow me to enter a bug in the system and get it fixed.

As far as RHEL6, the next updates to the Shared Object rules are the Fedora Core updates.  We're waiting on a couple 
issues to resolve themselves before we can do RHEL6, but, we're considering it for scheduling.

Joel

On Feb 16, 2011, at 2:08 PM, Merida, Dylan wrote:

> (Added correct CCs)
>
> I was getting something similar on RHEL6 with 2.9.0.3. 
>
> Jan 20 13:46:09 kernel: snort[31780]: segfault at 7f9d93e69000 ip 000000391be83dbb sp 00007fff1b93c188 error 4 in 
> libc-2.12.so[391be00000+175000]
>
> Jan 27 15:23:56 kernel: snort[6824]: segfault at 7f7ae467b000 ip 000000391be83dbb sp 00007fff1221b038 error 4 in 
> libc-2.12.so[391be00000+175000]
>
> Feb  6 21:36:33 kernel: snort[1857]: segfault at 7f2eaab4a000 ip 000000391be83dbb sp 00007fffaeb16958 error 4 in 
> libc-2.12.so[391be00000+175000]
>
> Feb 10 19:14:55 kernel: snort[26105]: segfault at 7f94bf0a4000 ip 000000391be83dbb sp 00007fff0a3ffb48 error 4 in 
> libc-2.12.so[391be00000+175000]
>
> I was meaning to send a bug report email for awhile, but it appears to have resolved itself in 2.9.0.4. I believe I 
> was using the RHEL5 compiled shared object rules.
> Did I read somewhere that the rules were going to be compiled for RHEL6 and newer Fedora in 2.9.0.4 rulesets soon?
>
> Dylan Merida
> Security Analyst
> Information Technology
> Eastern Kentucky University
>
> NOTE: IT @ EKU will NEVER request passwords or other personal information via email. Messages requesting such 
> information are fraudulent and should be deleted.
>
> From: Joel Esler <jesler () sourcefire com>
> Date: Wed, 16 Feb 2011 13:57:18 -0500
> To: John Hally <JHally () ebscohost com>
> Cc: Snort-users mailing lists <snort-users () lists sourceforge net>
> Subject: Re: [Snort-users] snort v2.9.0.4 Fedora 14 Segmentation Fault
>
> Are you using Shared Object rules?  If so, are you using the correct ones?
>
>
>
> Joel
>
> On Feb 16, 2011, at 11:19 AM, John Hally wrote:
>
> > Hello All,
> >  
> > I’m running into a segmentation fault in snort v2.9.0.4 on Fedora 14.  Has anyone else run into this issue?
> >  
> > kernel: [92638.716889] snort[25919]: segfault at 7f45ac47f0f4 ip 00007f45b4b47020 sp 00007fffe68b0a68 error 4 in 
> > libc-2.13.so[7f45b4a17000+191000]
>
> --
> Joel Esler
> jesler () sourcefire.com
> http://blog.snort.org && http://blog.clamav.net

--
Joel Esler
jesler () sourcefire.com
http://blog.snort.org && http://blog.clamav.net

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users