[Snort-devel] Snort 1.8beta3 (Build 12) hangs - traces

william.c.gercken at ...350... william.c.gercken at ...350...
Wed Apr 25 11:06:50 EDT 2001


All,

Here are stack traces for the hanging problem. Seems to be consistent. I am
running the same test on both sides of the firewall (two separate machines)
and receive the same results. The internal sensor seems to always hang in
the same place. The external sensor was bit more random. I will try
debugging the spp_telnet_negotiation module to see if I can find anything.

Again the system info is (see other post for more info):
Compaq1850, 128MB Ram, PIII 500, RedHat 7.0, 2.2.16-22
NICs used by snort - Intel 100MB (eth1 and eth2)
gcc-2.96-54
glib-1.2.8-4

Has anybody else seen this problem?

Thanks,
-bill

==


Internal Sensor:

1)

0x8070d25 in PreprocFunction (p=0xbffff630) at spp_telnet_negotiation.c:160
160                 DebugMessage(DEBUG_PLUGIN, "Checking: %c\n",
*read_ptr);
(gdb) bt
#0  0x8070d25 in PreprocFunction (p=0xbffff630) at
spp_telnet_negotiation.c:160
#1  0x80554be in Preprocess (p=0xbffff630) at rules.c:3260
#2  0x804b21f in ProcessPacket (user=0x0, pkthdr=0xbffffad0,
    pkt=0x80ae098 "\b") at snort.c:500
#3  0x8071e7c in pcap_read_packet ()
#4  0x8072c07 in pcap_loop ()
#5  0x804c4e4 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b0ef in main (argc=9, argv=0xbffffc84) at snort.c:434
#7  0x40154b65 in __libc_start_main (main=0x804aaac <main>, argc=9,
    ubp_av=0xbffffc84, init=0x8049f9c <_init>, fini=0x807aeac <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffc7c)
    at ../sysdeps/generic/libc-start.c:111

2)

0x8070d2e in PreprocFunction (p=0xbffff480) at spp_telnet_negotiation.c:160
160                 DebugMessage(DEBUG_PLUGIN, "Checking: %c\n",
*read_ptr);
(gdb) bt
#0  0x8070d2e in PreprocFunction (p=0xbffff480) at
spp_telnet_negotiation.c:160
#1  0x80554be in Preprocess (p=0xbffff480) at rules.c:3260
#2  0x804b21f in ProcessPacket (user=0x0, pkthdr=0xbffff920,
    pkt=0x80ae098 "\b") at snort.c:500
#3  0x8071e7c in pcap_read_packet ()
#4  0x8072c07 in pcap_loop ()
#5  0x804c4e4 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b0ef in main (argc=9, argv=0xbffffad4) at snort.c:434
#7  0x40154b65 in __libc_start_main (main=0x804aaac <main>, argc=9,
    ubp_av=0xbffffad4, init=0x8049f9c <_init>, fini=0x807aeac <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffacc)
    at ../sysdeps/generic/libc-start.c:111


External Sensor:

1)

DebugMessage (dbg=-1073744832, fmt=0x0) at debug.h:57
57      static __inline__ void DebugMessage(int dbg,char *fmt, ...) {}
(gdb)
(gdb) bt
#0  DebugMessage (dbg=-1073744832, fmt=0x0) at debug.h:57
#1  0x8055202 in Preprocess (p=0xbffff440) at rules.c:3260
#2  0x804b17f in ProcessPacket (user=0x0, pkthdr=0xbffff8f0, pkt=0x80a63da
"")
    at snort.c:500
#3  0x807197e in pcap_read ()
#4  0x8071f4f in pcap_loop ()
#5  0x804c3e3 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b04f in main (argc=10, argv=0xbffffa94) at snort.c:434
#7  0x40158b65 in __libc_start_main (main=0x804aa0c <main>, argc=10,
    ubp_av=0xbffffa94, init=0x8049f2c <_init>, fini=0x8078e3c <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffa8c)
    at ../sysdeps/generic/libc-start.c:111

2)

0x8070a6c in PreprocFunction (p=0xbffff440) at spp_telnet_negotiation.c:160
160                 DebugMessage(DEBUG_PLUGIN, "Checking: %c\n",
*read_ptr);
(gdb) bt
#0  0x8070a6c in PreprocFunction (p=0xbffff440) at
spp_telnet_negotiation.c:160
#1  0x8055202 in Preprocess (p=0xbffff440) at rules.c:3260
#2  0x804b17f in ProcessPacket (user=0x0, pkthdr=0xbffff8f0, pkt=0x80a63da
"")
    at snort.c:500
#3  0x807197e in pcap_read ()
#4  0x8071f4f in pcap_loop ()
#5  0x804c3e3 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b04f in main (argc=10, argv=0xbffffa94) at snort.c:434
#7  0x40158b65 in __libc_start_main (main=0x804aa0c <main>, argc=10,
    ubp_av=0xbffffa94, init=0x8049f2c <_init>, fini=0x8078e3c <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffa8c)
    at ../sysdeps/generic/libc-start.c:111


3)

PreprocFunction (p=0xbffff440) at spp_telnet_negotiation.c:181
181                     while((*read_ptr != (char) TNC_SE) && (read_ptr <
end))
(gdb) bt
#0  PreprocFunction (p=0xbffff440) at spp_telnet_negotiation.c:181
#1  0x8055202 in Preprocess (p=0xbffff440) at rules.c:3260
#2  0x804b17f in ProcessPacket (user=0x0, pkthdr=0xbffff8f0, pkt=0x80a63da
"")
    at snort.c:500
#3  0x807197e in pcap_read ()
#4  0x8071f4f in pcap_loop ()
#5  0x804c3e3 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b04f in main (argc=10, argv=0xbffffa94) at snort.c:434
#7  0x40158b65 in __libc_start_main (main=0x804aa0c <main>, argc=10,
    ubp_av=0xbffffa94, init=0x8049f2c <_init>, fini=0x8078e3c <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffa8c)
    at ../sysdeps/generic/libc-start.c:111


4)

0x8070a74 in PreprocFunction (p=0xbffff440) at spp_telnet_negotiation.c:160
160                 DebugMessage(DEBUG_PLUGIN, "Checking: %c\n",
*read_ptr);
(gdb) bt
#0  0x8070a74 in PreprocFunction (p=0xbffff440) at
spp_telnet_negotiation.c:160
#1  0x8055202 in Preprocess (p=0xbffff440) at rules.c:3260
#2  0x804b17f in ProcessPacket (user=0x0, pkthdr=0xbffff8f0, pkt=0x80a63da
"")
    at snort.c:500
#3  0x807197e in pcap_read ()
#4  0x8071f4f in pcap_loop ()
#5  0x804c3e3 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b04f in main (argc=10, argv=0xbffffa94) at snort.c:434
#7  0x40158b65 in __libc_start_main (main=0x804aa0c <main>, argc=10,
    ubp_av=0xbffffa94, init=0x8049f2c <_init>, fini=0x8078e3c <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffa8c)
    at ../sysdeps/generic/libc-start.c:111

5)

0x8070a6d in PreprocFunction (p=0xbffff440) at spp_telnet_negotiation.c:160
160                 DebugMessage(DEBUG_PLUGIN, "Checking: %c\n",
*read_ptr);
(gdb) bt
#0  0x8070a6d in PreprocFunction (p=0xbffff440) at
spp_telnet_negotiation.c:160
#1  0x8055202 in Preprocess (p=0xbffff440) at rules.c:3260
#2  0x804b17f in ProcessPacket (user=0x0, pkthdr=0xbffff8f0, pkt=0x80a63da
"")
    at snort.c:500
#3  0x807197e in pcap_read ()
#4  0x8071f4f in pcap_loop ()
#5  0x804c3e3 in InterfaceThread (arg=0x0) at snort.c:1376
#6  0x804b04f in main (argc=10, argv=0xbffffa94) at snort.c:434
#7  0x40158b65 in __libc_start_main (main=0x804aa0c <main>, argc=10,
    ubp_av=0xbffffa94, init=0x8049f2c <_init>, fini=0x8078e3c <_fini>,
    rtld_fini=0x4000df24 <_dl_fini>, stack_end=0xbffffa8c)
    at ../sysdeps/generic/libc-start.c:111





More information about the Snort-devel mailing list