Snort mailing list archives

segmentation fault in Snortsp-beta3 version


From: Gopiraj Annamalai <agopiraj () gmail com>
Date: Fri, 21 Jan 2011 10:42:15 +0530

Hai,

I am trying to add nfq support in snortsp-beta3 version.

As given in the code,the packets are added to the queue using  the function
"add_traffic_to_queues" and it is received by analyser through  the function
"acquire_traffic".I printed the packets in both the functions after putting
to queue(in add_traffic_to_queues) and at the "acquire_traffic" function.
In "add_traffic_to_queues" function,the packets queued are fine.But in
"acquire_traffic", the packets are not received properly from
queue.Sometimes same packets received two or three times
consequently.Sometimes packets are lost or incorrect.But the length of the
corresponding packets is correct.Only the content of the packet changes when
compared with packets(while adding to queue).
Because of this problem,"segmentation fault" coming in the execution of the
code.
The code is working properly  with "pcap" ,but with nfq only problem
comes.Also if i enabled the "enable-single-thread" option in configure,is it
working nicely.With multi-threaded with nfq,this error comes.

If anyone tell me what is the reason for this problem.If any solution is
there,tell me...

Thanks in advance.

With regards,
A. Gopiraj
------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: