Snort mailing list archives
snort3 - Segmentation fault when inline?
From: Marcin Dulak <marcin.dulak () gmail com>
Date: Wed, 15 Feb 2017 16:14:18 +0100
Hi, CentOS7, with the snort/daq build from I'm getting Segmentation fault: # cat /etc/yum.repos.d/copr-marcindulak-snort.repo [copr-marcindulak-snort] name=copr-marcindulak-snort baseurl= https://copr-be.cloud.fedoraproject.org/results/marcindulak/snort/epel-$releasever-$basearch enabled=0 gpgcheck=1 gpgkey= https://copr-be.cloud.fedoraproject.org/results/marcindulak/snort/pubkey.gpg # yum -y install snort --enablerepo=copr-marcindulak-snort # SNORT_LUA_PATH=/etc/snort LUA_PATH=/usr/include/snort/lua/?.lua snort --daq-dir /usr/lib64/daq --daq nfq -Q -l /var/log/snort -c /etc/snort/snort.lua -------------------------------------------------- o")~ Snort++ 3.0.0-a4-225 -------------------------------------------------- Loading /etc/snort/snort.lua: ssh rpc_decode pop stream_user stream_tcp smtp ssl gtp_inspect stream_ip appid stream_icmp reputation stream_udp file_id back_orifice classifications port_scan dnp3 ftp_data ftp_server telnet ftp_client http_inspect stream references arp_spoof sip wizard dns imap stream_file Finished /etc/snort/snort.lua. -------------------------------------------------- nfq DAQ configured to inline. Commencing packet processing Segmentation fault The goal is to have snort inline with nfqueue, but I'm not doing anything about iptables yet. Only the commands executed above. Please be careful: this snort build has broken scriptlets, I have not fixed them yet. The yum repo contains debuginfo so you should be able to debug snort if needed. Marcin
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort3 - Segmentation fault when inline? Marcin Dulak (Feb 15)
- Re: snort3 - Segmentation fault when inline? Carter Waxman (cwaxman) (Feb 15)
- Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 15)
- Re: snort3 - Segmentation fault when inline? Russ (Feb 18)
- Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 18)
- Re: snort3 - Segmentation fault when inline? Russ (Feb 19)
- Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 19)
- Re: snort3 - Segmentation fault when inline? Marcin Dulak (Feb 15)
- Re: snort3 - Segmentation fault when inline? Carter Waxman (cwaxman) (Feb 15)