spp_arpspoof core - solaris 2.6 (after adding -lresolv to LIBS var)

["Bill Marquette" <wlmarque () hewitt com>]

> From snort.conf...I shouldn't need any arguments to the arpspoof plugin unless
I'm misunderstanding the below.  FWIW, I don't believe I had an output plugin
defined either, but that shouldn't have caused this crash.

# arpspoof
#----------------------------------------
# Experimental ARP detection code from Jeff Nathan, detects ARP attacks,
# directed ARP requests, and specific ARP mapping monitoring.  Takes a
# "-directed" option to turn on directed ARP request detection.

preprocessor arpspoof

-----------

This GDB was configured as "sparc-sun-solaris2.6"...
Core was generated by `/apps/snort/current/bin/snort -D -o -c
/apps/snort/current/etc/snort.conf -i le'.
Program terminated with signal 11, Segmentation Fault.
Reading symbols from /usr/lib/libm.so.1...done.
Reading symbols from /usr/lib/libsocket.so.1...done.
Reading symbols from /usr/lib/libnsl.so.1...done.
Reading symbols from /usr/lib/libresolv.so.2...done.
Reading symbols from /usr/lib/libc.so.1...done.
Reading symbols from /usr/lib/libdl.so.1...done.
Reading symbols from /usr/lib/libmp.so.2...done.
Reading symbols from /usr/lib/nss_files.so.1...done.
#0  0xef5e4734 in strlen ()
(gdb) bt
#0  0xef5e4734 in strlen ()
#1  0x2822c in mSplit (str=0x0, sep=0x6af98 " ", max_strs=2, toks=0xefffd334,
    meta=92 '\\') at mstring.c:114
#2  0x524f4 in ParseARPspoofArgs (args=0x0) at spp_arpspoof.c:175
#3  0x52800 in ARPspoofInit (args=0x0) at spp_arpspoof.c:299
#4  0x29a44 in ParsePreprocessor (rule=0xd0928 "") at rules.c:1329
#5  0x290c8 in ParseRule (rule_file=0x8c1d0,
    prule=0xeffff5d8 "preprocessor arpspoof", inclevel=0) at rules.c:541
#6  0x28bdc in ParseRulesFile (file=0x8b000 "", inclevel=0) at rules.c:201
#7  0x1fb1c in main (argc=772280, argv=0xeffffacc) at snort.c:309



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users