Re: Problems running 32 bit snort on a 64 bit linux kernel

[Russ Combs <rcombs () sourcefire com>]

Looks like an ipq issue.  Any reason not to use 64 on 64?

On Thu, Apr 7, 2011 at 6:36 AM, Sudarshan Raghavan <
sudarshan.t.raghavan () gmail com> wrote:

> I am trying to get 32 bit snort up and running a 64 bit linux kernel
> (2.6.33.5). snort starts up fine but, I am seeing an error every time
> it has to process a packet. The error "Received error message 22" is
> printed for every packet that is read. If I switch to a 32 bit
> 2.6.33.5 kernel, I don't see any error and everything works fine. It
> looks like something is wrong with ipq_read and ipq_message_type
> returns a NLMSG_ERROR.
>
> Just to confirm, I compiled the sample code in ip_queue man page as a
> 32 bit binary and I am seeing the same error as seen on snort when
> running on a 64 bit kernel. As expected, the code works fine on a 32
> bit kernel.
>
> Is this the expected behaviour? Should snort be compiled as a 64 bit
> binary for it work on a 64 bit kernel. Please let me know if you need
> more information. If this is not a snort issue but a problem with
> netfilter and libipq, please let me know.
>
> Regards,
> Sudarshan
>
>
> ------------------------------------------------------------------------------
> Xperia(TM) PLAY
> It's a major breakthrough. An authentic gaming
> smartphone on the nation's most reliable network.
> And it wants your games.
> http://p.sf.net/sfu/verizon-sfdev
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users