Snort mailing list archives
rule update causes seg fault
From: Josh.Sakofsky () donovandata com
Date: Wed, 3 Dec 2003 14:10:21 -0500
any ideas on this? when i updated my rule set to the latest stable release, i get a seg fault.... i am running snort 2.0.5 on a redhat 9.0 box the actually command run is: snort -D -i eth1 -c /etc/snort/snort-seg1.conf the box is configured with 3 NICs, 2 for monitoring different segments and one for management the 2 monitoring ports have no ip i run 2 instances of snort, with each instances having it's own snort.conf file but pointing to the same rule directory the instance for seg1 is the only one with a problem, the one for seg0 has no issue and runs fine a diff of the 2 config files shows that only the $HOME_NET and $EXTERNAL_NET variables are different if i run snort -Tc snort-seg1.conf, it tells me the config file is fine once i roll back the rule update, snort runs both instances with no problem... attached is the output from running snort in gdb with a where and a bt please let me know if printing any variables might help....
Attachment:
gdb-snort.txt
Description:
Current thread:
- rule update causes seg fault Josh . Sakofsky (Dec 03)
- <Possible follow-ups>
- RE: rule update causes seg fault McGuire, Dennis (Dec 04)