Snort mailing list archives

segfault - how to troubleshoot


From: Joe S <js.lists () gmail com>
Date: Tue, 31 Jan 2012 08:56:54 -0800

I noticed this in my logs this morning. I'm running Doug Burks security onion.

Jan 31 07:01:26 onion kernel: [80105.772301] snort[2020]: segfault at
0 ip 0081964e sp bfb81b80 error 4 in
libsf_engine.so.0.0.0[817000+e000]
Jan 31 07:01:26 onion kernel: [80105.772298] __ratelimit: 48 callbacks
suppressed

$ snort -V

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.2 IPv6 GRE (Build 78)
   ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2011 Sourcefire, Inc., et al.
           Using libpcap version 1.0.0
           Using PCRE version: 7.8 2008-09-05
           Using ZLIB version: 1.2.3.3

$ cat /etc/debian_version
squeeze/sid

$ uname -a
Linux onion 2.6.32-38-generic #83-Ubuntu SMP Wed Jan 4 11:13:04 UTC
2012 i686 GNU/Linux

Any recommendation on how to troubleshoot? Snort was running for 22 hours.

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: