Snort mailing list archives

Re: Snort exited on signal 6


From: sockstat <sockstat () hotmail com>
Date: Wed, 11 Sep 2013 23:31:42 -0700

Can you start snort in gdb? Like gdb /usr/local/bin/snort.
Then: set args ......
The arguments you give snort to startup? Then type run. When the assert happens can you type bt? Meaning backtrace? 
That would help. It might just be that the snort developers already have enough info with your current mail though. 
Just trying to help. Thanks, Reinoud

-------- Original message --------
From: Mike <gmm () fcbank com ua>
Date: 09/11/2013  11:02 PM  (GMT-08:00)
To: snort-devel () lists sourceforge net
Subject: [Snort-devel] Snort exited on signal 6

Hi everyone,

in my new setup Snort exited on signal 6 shortly after start

Sep 11 17:26:41 snort kernel: pid 1663 (snort), uid 40000: exited on signal 6

Here is some information in /tmp/snort.debug:

Assertion failed: (b < HTTP_BUFFER_MAX && buf), function SetHttpBufferEncoding, file ../../src/detection_util.h, line 
142.

snort -V

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.5.3 GRE (Build 132) FreeBSD
   ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using libpcap version 1.4.0
           Using PCRE version: 8.33 2013-05-28
           Using ZLIB version: 1.2.7

Should I provide some additional info?

Mike.


------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: