Snort mailing list archives
snort 3.1.1.0 - Segmentation Fault
From: Özkan KIRIK via Snort-devel <snort-devel () lists snort org>
Date: Tue, 9 Mar 2021 09:26:01 +0300
Hello, I'm using snort 3.1.1.0 on FreeBSD stable/12 with netmap daq inline. Snort is going to crash within about 2 hours. The bug is repeatable but we should wait about 2 hours to repeat. I compiled snort with debug symbols and binary not stripped. # file /usr/local/bin/snort /usr/local/bin/snort: ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD), dynamically linked, interpreter /libexec/ld-elf.so.1, FreeBSD-style, with debug_info, not stripped There was no core file dumped. Output is below. Additionally, i couldn't get these messages in daemon mode. I think logging in daemon mode should be improved. Snort (PID 74073) caught fatal signal: SIGSEGV (11) Version: 3.1.1.0 Backtrace: #0 0x7ffffffff003 #1 0x8010901bf (/lib/libc.so.7 @0x800eed000) #2 0x4bc5d8 (/usr/local/bin/snort @0x200000) #3 0x4b8eea (/usr/local/bin/snort @0x200000) #4 0x4b8dab (/usr/local/bin/snort @0x200000) #5 0x37a35f (/usr/local/bin/snort @0x200000) #6 0x37a490 (/usr/local/bin/snort @0x200000) #7 0x3759b6 (/usr/local/bin/snort @0x200000) #8 0x37550c (/usr/local/bin/snort @0x200000) #9 0x434a97 (/usr/local/bin/snort @0x200000) #10 0x3e2081 (/usr/local/bin/snort @0x200000) #11 0x349b90 (/usr/local/bin/snort @0x200000) #12 0x3bfa65 (/usr/local/bin/snort @0x200000) #13 0x3bf996 (/usr/local/bin/snort @0x200000) #14 0x3bfb0f (/usr/local/bin/snort @0x200000) #15 0x3c1045 (/usr/local/bin/snort @0x200000) #16 0x3c0ad6 (/usr/local/bin/snort @0x200000) #17 0x3c0a1d (/usr/local/bin/snort @0x200000) #18 0x5559b5 (/usr/local/bin/snort @0x200000) #19 0x801466fdc (/lib/libthr.so.3 @0x801458000) #20 0x0 = Current DAQ Message (Type 1) = == Header (48) == b24a 4660 0000 0000 1402 0900 0000 0000 3c00 0000 0000 0000 0100 0000 ffff ffff 0000 0000 0000 0000 0000 0000 0000 0000 == Data (60) == 000c 2964 b208 0050 56a1 a259 0800 4500 0029 f150 4000 8006 c15e 0a0a 320a 0808 0404 cda4 01bb 1468 b75b 2c5f dc4d 5010 2012 a3d1 0000 0000 0000 0000 Segmentation fault
_______________________________________________ Snort-devel mailing list Snort-devel () lists snort org https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- snort 3.1.1.0 - Segmentation Fault Özkan KIRIK via Snort-devel (Mar 08)
- Re: snort 3.1.1.0 - Segmentation Fault Deepak Ramadass Deepak Ramadass (deramada) via Snort-devel (Mar 12)