[Snort-devel] Re: Redhat 5.2 snort segmentation fault

Martin Roesch roesch at ...402...
Mon Aug 27 00:03:58 EDT 2001


Looks like the VERSION #define didn't get filled in.  You probably have
an ancient version of automake/autoconf, try upgrading then do a 'make
distclean && ./configure && make' and see what happens.

    -Marty

Thomas Marsh wrote:
> 
> Red Hat Linux release 5.2 (Apollo)
> Kernel 2.0.36 on an i586 (AMD 450)
> 
> snort -v
> 
> core'd :
> 
> [root at ...635... snort-1.8.1-RELEASE]# ./snort -v
> snort.c:665: Parsing command line...
> snort.c:683: Processing cmd line switch: v
> snort.c:1126: Verbose Flag active
> snort.c:1220: pcap_cmd is NULL
> Log directory =
> 
>         --== Initializing Snort ==--
> snort.c:256: Opening interface: eth0
> 
> Initializing Network Interface eth0
> snaplength info: set=1514/compiled=1514/wanted=0
> Writing PID file to
> snort.c:301: Setting Packet Processor
> Decoding Ethernet on interface eth0
> 
>         --== Initialization Complete ==--
> Segmentation fault
> [root at ...635... snort-1.8.1-RELEASE]# gdb snort core
> GNU gdb 4.17.0.4 with Linux/x86 hardware watchpoint and FPU support
> Copyright 1998 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and you
> welcome to change it and/or distribute copies of it under certain condit
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB.  Type "show warranty" for detai
> This GDB was configured as "i386-redhat-linux"...
> Core was generated by `./snort -v'.
> Program terminated with signal 11, Segmentation fault.
> Reading symbols from /lib/libm.so.6...done.
> Reading symbols from /lib/libnsl.so.1...done.
> Reading symbols from /usr/lib/libpq.so.1...done.
> Reading symbols from /lib/libc.so.6...done.
> Reading symbols from /lib/libcrypt.so.1...done.
> Reading symbols from /lib/ld-linux.so.2...done.
> Reading symbols from /lib/libnss_files.so.1...done.
> #0  0x40069b1e in _IO_vfprintf (s=0xbfffd60c,
>     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> (roesch at ...402..., www.snort.org)\n", ap=0xbffffcc8) at vfprintf.c:
> vfprintf.c:1080: No such file or directory.
> (gdb) bt
> #0  0x40069b1e in _IO_vfprintf (s=0xbfffd60c,
>     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> (roesch at ...402..., www.snort.org)\n", ap=0xbffffcc8) at vfprintf.c:
> #1  0x4006cad3 in buffered_vfprintf (s=0x8098ef8,
>     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> (roesch at ...402..., www.snort.org)\n", args=0xbffffcc4) at vfprintf.
> #2  0x400684f3 in _IO_vfprintf (s=0x8098ef8,
>     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> (roesch at ...402..., www.snort.org)\n", ap=0xbffffcc4) at vfprintf.c:
> #3  0x4006f291 in fprintf (stream=0x8098ef8,
>     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> (roesch at ...402..., www.snort.org)\n") at fprintf.c:34
> #4  0x804c5dd in DisplayBanner () at snort.c:2166
> #5  0x804a5cb in main (argc=2, argv=0xbffffd78) at snort.c:349
> (gdb) quit
> [root at ...635... snort-1.8.1-RELEASE]#
> 
> --
> Tom Marsh
> 
> mailto:marsht1 at ...634...
> http://www.nitesco.com

--
Martin Roesch
roesch at ...402...
http://www.sourcefire.com - http://www.snort.org




More information about the Snort-devel mailing list