Snort ver 1.8.4-beta2 gives bus error.....

["PAD HOSMANE" <phosmane () pop fedworld gov>]

Hi,
  I compiled snort 1.8.4-beta2 on HP-UX 11.00 (with GCC 3.0.1). I ran
configure with follwoing options

./configure --prefix=/usr/local/snort-1.8.4b2 --with-openssl=/usr/local/bin/
openssl0.9.6c --with-mysql=/opt/mysql --with-libpcap-includes=/opt/libpcap/i
nclude --with-libpcap-libraries=/opt/libpcap/lib --enable-debug --enable-smb
alerts --enable-flexresp

When i run /usr/local/snort.1.8.4-beta2/bin/snort, it gives bus error and
core dumps. I ran gdb on the core dump and below is the output:

# gdb snort core
HP gdb 2.1
Copyright 1986 - 1999 Free Software Foundation, Inc.
Hewlett-Packard Wildebeest 2.1 (based on GDB 5.0-hpwdb-20000630)
Wildebeest is free software, covered by the GNU General Public License, and
you are welcome to change it and/or distribute copies of it under certain
conditions.  Type "show copying" to see the conditions.  There is
absolutely no warranty for Wildebeest.  Type "show warranty" for details.
Wildebeest was built for PA-RISC 1.1 or 2.0 (narrow), HP-UX 11.00.
..
Core was generated by `snort'.
Program terminated with signal 10, Bus error.

warning: The shared libraries were not privately mapped; setting a
breakpoint in a shared library will not work until you rerun the program.

#0  0x7c46c in InitStream4Pkt () at spp_stream4.c:2916
2916        stream_pkt->iph->ip_ver   = 0x4;
(gdb) where
#0  0x7c46c in InitStream4Pkt () at spp_stream4.c:2916
#1  0x75438 in Stream4Init (args=0x40058d00 "detect_scans") at
spp_stream4.c:587
#2  0x29fc0 in ParsePreprocessor (rule=0x7f7f0f38 "preprocessor stream4:
detect_scans") at rules.c:1327
#3  0x28cfc in ParseRule (rule_file=0x7f7d9d30, prule=0x7f7f0a30
"preprocessor stream4: detect_scans", inclevel=0) at rules.c:539
#4  0x28388 in ParseRulesFile (file=0x400349a4 "/etc/snort.conf",
inclevel=0) at rules.c:198
#5  0x1bc64 in ReadConfFile () at snort.c:3316
#6  0x14b98 in main (argc=5, argv=0x7f7f0764) at snort.c:189


Any help is greatly appreciated.

Thanks



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users