Re: Bug in mSearchREG() that can make Snort go into an infinite loop.

[Martin Roesch <roesch () sourcefire com>]

It should probably be noted that the regex code is still non-functional
(i.e. It doesn't work right) which is why it's not discussed in the
docs/polite company.  The fact that it could hang was nasty, but it's not
even supposed to work yet, so I wouldn't put a whole lot of faith in it
working even if it doesn't spin the computer off into navel-staring mode.

     -Marty

On 2/24/02 12:08 PM, "Chris Green" <cmg () uab edu> wrote:

> Andreas Östling <andreaso () it su se> writes:
>
> > Hello,
> >
> > As described by a few others (for example
> > http://sourceforge.net/tracker/index.php?func=detail&aid=494612&group_id=3357
> > &atid=103357)
> > my Snort sometimes also stopped logging, and went up to near 100% CPU
> > usage.
>
> Ahh Thanks for the patch.  Applying it now..  Regex rules are still
> not something to write home about but this is a critical bug.

-- 
Martin Roesch - Founder/CEO Sourcefire Inc. - (410) 552-6999
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch () sourcefire com - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users