[Snort-devel] snort failes on ppp0

Hugo van der Kooij hvdkooij at ...372...
Mon Apr 9 15:46:35 EDT 2001


On Tue, 10 Apr 2001, Fyodor wrote:

> > +++++++++++++++++++++++++++++++++++++++++++++++++++
> > Initializing rule chains...
> > Segmentation fault (core dumped)
> >
> > How do I do forensics on that dump???
> >
>
> uhh..:)  see BUGS file for the details, but basically 'gdb snort core' and
> typing 'bt' should be ok to give an idea what's wrong here... Recomiling
> snort with -ggdb and -DDEBUG switch (--enable-debug) would help alot too. :)

Seems I didn't remove gdb yet.

At startup I get:

GNU gdb 19991004
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "sparc-redhat-linux"...
(no debugging symbols found)...

warning: "/root/core": no core file handler recognizes format, using default
Core was generated by `snort -u snort -g snort -s -d -v -i ppp0 -l
/var/log/snort -c /etc/snort/snort.'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libm.so.6...done.
Reading symbols from /lib/libnsl.so.1...done.
Reading symbols from /usr/lib/libssl.so.0...done.
Reading symbols from /usr/lib/libcrypto.so.0...done.
Reading symbols from /lib/libc.so.6...done.
Reading symbols from /lib/ld-linux.so.2...done.
Reading symbols from /lib/libnss_files.so.2...done.
#0  0x255a0 in _init ()
(gdb)

After typing bt:

#0  0x255a0 in _init ()
#1  0x2537c in _init ()
#2  0x252cc in _init ()
#3  0x1c814 in _init ()
#4  0x1beec in _init ()
#5  0x1bae8 in _init ()
#6  0x13378 in _init ()
#7  0x501f56a8 in __libc_start_main () at ../sysdeps/generic/libc-start.c:122
(gdb)

glibc is v2.1.3 (Latest update from Red Hat Linux 6.2 as goes for the
other software on the little bugger)

Hugo.

-- 
Alle email aan mij verzonden is gebonden aan de regels beschreven op
mijn homepage.
All email send to me is bound to the rules described on my homepage.

    Hugo van der Kooij; Oranje Nassaustraat 16; 3155 VJ  Maasland
    hvdkooij at ...372...		http://hvdkooij.xs4all.nl/

	    Don't meddle in the affairs of sysadmins,
	    for they are subtle and quick to anger.





More information about the Snort-devel mailing list