Snort mailing list archives
segmentation fault in Snortsp-beta3 version
From: Gopiraj Annamalai <agopiraj () gmail com>
Date: Fri, 21 Jan 2011 10:42:15 +0530
Hai, I am trying to add nfq support in snortsp-beta3 version. As given in the code,the packets are added to the queue using the function "add_traffic_to_queues" and it is received by analyser through the function "acquire_traffic".I printed the packets in both the functions after putting to queue(in add_traffic_to_queues) and at the "acquire_traffic" function. In "add_traffic_to_queues" function,the packets queued are fine.But in "acquire_traffic", the packets are not received properly from queue.Sometimes same packets received two or three times consequently.Sometimes packets are lost or incorrect.But the length of the corresponding packets is correct.Only the content of the packet changes when compared with packets(while adding to queue). Because of this problem,"segmentation fault" coming in the execution of the code. The code is working properly with "pcap" ,but with nfq only problem comes.Also if i enabled the "enable-single-thread" option in configure,is it working nicely.With multi-threaded with nfq,this error comes. If anyone tell me what is the reason for this problem.If any solution is there,tell me... Thanks in advance. With regards, A. Gopiraj
------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
Current thread:
- segmentation fault in Snortsp-beta3 version Gopiraj Annamalai (Jan 20)