core dump snort 1.8.3

["PAD HOSMANE" <phosmane () pop fedworld gov>]

Hi,
  I am running snort 1.8.3 on HP-UX 11.00. It is working fine, but it gives
bus error very often, and for the first time it gave core dump. I ran gdb on
core and below is the following output. I am using libpcap ver 0.6.2. I also
having the bus error problem with snort 1.8.4-beta2, i did not get any
response for it. Please respond.

Thanks


# gdb snort core
HP gdb 2.1
Copyright 1986 - 1999 Free Software Foundation, Inc.
Hewlett-Packard Wildebeest 2.1 (based on GDB 5.0-hpwdb-20000630)
Wildebeest is free software, covered by the GNU General Public License, and
you are welcome to change it and/or distribute copies of it under certain
conditions.  Type "show copying" to see the conditions.  There is
absolutely no warranty for Wildebeest.  Type "show warranty" for details.
Wildebeest was built for PA-RISC 1.1 or 2.0 (narrow), HP-UX 11.00.
..
Core was generated by `snort'.
Program terminated with signal 10, Bus error.

warning: The shared libraries were not privately mapped; setting a
breakpoint in a shared library will not work until you rerun the program.

#0  DecodeIP (pkt=0x400480a6 "E", len=1596, p=0x7f7f10d8) at decode.c:1194
1194        if(p->iph->ip_ver != 4)
(gdb) where
#0  DecodeIP (pkt=0x400480a6 "E", len=1596, p=0x7f7f10d8) at decode.c:1194
#1  0x1d56c in DecodeEthPkt (p=0x4000daa2, pkthdr=0x400130c8, pkt=0x7f7f0a98
"\177\177\t\350@\003\261\362") at decode.c:62
#2  0x1d56c in DecodeEthPkt (p=0x40048098, pkthdr=0x40581e50, pkt=0x40048080
"<{\203+") at decode.c:62
#3  0x15190 in ProcessPacket (user=0x400480a6 "E", pkthdr=0x63c,
pkt=0x7f7f10d8 "@\004\200\200@\004\200\230") at snort.c:486
#4  0x50fc0 in RebuildFrag (ft=0x8c, p=0x400480a6) at spp_frag2.c:751
#5  0x508e8 in Frag2Defrag (p=0x7f7f0a98) at spp_frag2.c:473
#6  0x23770 in Preprocess (p=0x7f7f0a98) at rules.c:3508
#7  0x151c8 in ProcessPacket (user=0x400480a6 "E", pkthdr=0x63c,
pkt=0x7f7f10d8 "@\004\200\200@\004\200\230") at snort.c:536
#8  0xc0a54ed4 in ?? () from /opt/libpcap/lib/libpcap.sl
#9  0xc0a55d68 in ?? () from /opt/libpcap/lib/libpcap.sl
#10 0x16ef0 in InterfaceThread (arg=0x400480a6) at snort.c:1663
#11 0x14d4c in main (argc=130, argv=0x7f7f075c) at snort.c:469





_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users