Re: Snort exited on signal 6

[Russ Combs <rcombs () sourcefire com>]

Thanks for reporting the problem.  Are you able to reproduce it?  If so,
can you run in a debugger and get a backtrace?  A pcap and conf that
triggers it would be most helpful.

Thanks
Russ



On Wed, Sep 11, 2013 at 11:11 AM, Michael M Galapchuk <
Michael.Galapchuk () fcbank com ua> wrote:

> Hi everyone,
>
> in my new setup Snort exited on signal 6 shortly after start
>
> Sep 11 17:26:41 snort kernel: pid 1663 (snort), uid 40000: exited on
> signal 6
>
> Here is some information in /tmp/snort.debug:
>
> Assertion failed: (b < HTTP_BUFFER_MAX && buf), function
> SetHttpBufferEncoding, file ../../src/detection_util.h, line 142.
>
>
> snort -V
>
> Version 2.9.5.3 GRE (Build 132) FreeBSD
> By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
> Copyright (C) 1998-2013 Sourcefire, Inc., et al.
> Using libpcap version 1.4.0
> Using PCRE version: 8.33 2013-05-28
> Using ZLIB version: 1.2.7
>
> Should I provide some additional info?
>
> Mike.
>
>
>
>
> ------------------------------------------------------------------------------
> How ServiceNow helps IT people transform IT departments:
> 1. Consolidate legacy IT systems to a single system of record for IT
> 2. Standardize and globalize service processes across IT
> 3. Implement zero-touch automation to replace manual, redundant tasks
> http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!