Re: Crash while running snort-3.0.0-a1 with netmap

[Michael Altizer <mialtize () cisco com>]

Do you run into the same crash on that system/configuration with Snort 
2.9.x + netmap?

On 12/13/2014 04:13 AM, Y M wrote:
> Hello,
>
> While running snort with netmap support, snort crashes and process 
> hangs with a kill -9 to stop process:
>
> sudo /usr/local/snort/bin/snort -c /usr/local/snort/etc/snort.lua -i 
> eth0 --daq netmap --daq-dir=/usr/local/lib/daq --shell
>
> crash log:
>
> ProblemType: KernelOops
> Annotation: Your system might become unstable now and might need to be 
> restarted.
> Date: Fri Dec 12 20:12:01 2014
> Failure: oops
> OopsText:
>  BUG: unable to handle kernel NULL pointer dereference at     (null)
>  IP: [<          (null)>]           (null)
>  PGD 3d1c9067 PUD 81d7f067 PMD 0
>  Oops: 0010 [#1] SMP
>  Modules linked in: pf_ring(OX) netmap(OX) vmw_vsock_vmci_transport 
> vsock snd_ens1371 snd_ac97_codec bnep rfcomm ac97_bus gameport 
> bluetooth snd_pcm snd_page_alloc snd_seq_midi coretemp 
> crct10dif_pclmul snd_seq_midi_event crc32_pclmul ghash_clmulni_intel 
> snd_rawmidi snd_seq aesni_intel hid_generic aes_x86_64 lrw gf128mul 
> glue_helper vmw_balloon snd_seq_device ablk_helper snd_timer cryptd 
> serio_raw usbhid snd hid vmwgfx soundcore ttm drm vmw_vmci i2c_piix4 
> shpchp mac_hid parport_pc ppdev lp parport psmouse mptspi mptscsih 
> ahci e1000 mptbase libahci vmw_pvscsi floppy vmxnet3 [last unloaded: 
> netmap]
>  CPU: 1 PID: 86519 Comm: snort Tainted: G           OX 
> 3.13.0-43-generic #72-Ubuntu
> ......
>
> Thanks.
> Yaser
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
>
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!