Snort mailing list archives

Re: Snort 1.8.1 and AXP (Alpha) based Linux.


From: "Carl C." <cc () carlc com>
Date: Fri, 17 Aug 2001 13:14:16 -0400

Oops... My bad... I should have said that I downloaded the
source code and compiled it myself (since it was ALPHA
based).

It does fail about every 24-48 hours. Its not predetermined when
or why it fails, just that I get that same error message.

I did build the 1.7 a while back and it worked like a champ.
Its only been with 1.8 releases that its happening.

TIA,
Carl

----- Original Message ----- 
From: "Mayers, Philip J" <p.mayers () ic ac uk>
To: "'Carl C.'" <cc () carlc com>; <snort-users () lists sourceforge net>
Sent: Friday, August 17, 2001 11:43 AM
Subject: RE: [Snort-users] Snort 1.8.1 and AXP (Alpha) based Linux.


I've seen this (Nessus, not snort) with precompiled binaries from dodgy
sites. How often does it fail?

Regards,
Phil

+------------------------------------------+
| Phil Mayers                              |
| Network & Infrastructure Group           |
| Information & Communication Technologies |
| Imperial College                         |
+------------------------------------------+

-----Original Message-----
From: Carl C. [mailto:cc () carlc com]
Sent: 17 August 2001 16:06
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort 1.8.1 and AXP (Alpha) based Linux.


Hi,

    I'm new to the list but have been running Snort for over a year.
Snort 1.7 worked nicely and I've just recently upgraded to the
new Snort 1.8.1-released.

    I am losing snort every so often with the following command
left in /var/log/messages:

Aug 17 06:01:01 axp1 kernel: snort(32485): unaligned trap at
000000012004b0b0: 402207a34821f621 29 2

    Any ideas on best how to debug this??? Or do I have to go
back to snort 1.7 (don't want to... but can...). Its on RedHat V7.1
with all current patchs from update.redhat.com.

    Thanks!
    Carl

p.s. I'm digest based, so for faster response do feel free to send the reply
directly to
me at cc-at-carlc-dot-com.


=====================
http://www.carlc.com/

          "Price, Performance, Quality.  Choose any two you like."


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: