Re: Crash while running snort-3.0.0-a1 with netmap

["Russ Combs (rucombs)" <rucombs () cisco com>]

Ouch.  Do you have the same problem running with --daq pcap?

________________________________
From: Y M [snort () outlook com]
Sent: Saturday, December 13, 2014 4:13 AM
To: snort-devel () lists sourceforge net
Subject: [Snort-devel] Crash while running snort-3.0.0-a1 with netmap

Hello,

While running snort with netmap support, snort crashes and process hangs with a kill -9 to stop process:

sudo /usr/local/snort/bin/snort -c /usr/local/snort/etc/snort.lua -i eth0 --daq netmap --daq-dir=/usr/local/lib/daq 
--shell

crash log:

ProblemType: KernelOops
Annotation: Your system might become unstable now and might need to be restarted.
Date: Fri Dec 12 20:12:01 2014
Failure: oops
OopsText:
 BUG: unable to handle kernel NULL pointer dereference at           (null)
 IP: [<          (null)>]           (null)
 PGD 3d1c9067 PUD 81d7f067 PMD 0
 Oops: 0010 [#1] SMP
 Modules linked in: pf_ring(OX) netmap(OX) vmw_vsock_vmci_transport vsock snd_ens1371 snd_ac97_codec bnep rfcomm 
ac97_bus gameport bluetooth snd_pcm snd_page_alloc snd_seq_midi coretemp crct10dif_pclmul snd_seq_midi_event 
crc32_pclmul ghash_clmulni_intel snd_rawmidi snd_seq aesni_intel hid_generic aes_x86_64 lrw gf128mul glue_helper 
vmw_balloon snd_seq_device ablk_helper snd_timer cryptd serio_raw usbhid snd hid vmwgfx soundcore ttm drm vmw_vmci 
i2c_piix4 shpchp mac_hid parport_pc ppdev lp parport psmouse mptspi mptscsih ahci e1000 mptbase libahci vmw_pvscsi 
floppy vmxnet3 [last unloaded: netmap]
 CPU: 1 PID: 86519 Comm: snort Tainted: G           OX 3.13.0-43-generic #72-Ubuntu
......

Thanks.
Yaser

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!