[Snort-devel] Crashes with tags

Chris Green cmg at ...81...
Fri Jun 1 15:16:49 EDT 2001


#0  PruneNode (node=0x858f478) at tag.c:388
#1  0x806d616 in CheckTagList (p=0xbffff068) at tag.c:349
#2  0x8052df9 in Detect (p=0xbffff068) at rules.c:3520
#3  0x8052c4b in Preprocess (p=0xbffff068) at rules.c:3364
#4  0x804896b in ProcessPacket (user=0x0, pkthdr=0xbffff518, pkt=0x819f3c8 "") at snort.c:509
#5  0x80718c7 in pcap_read_packet ()
#6  0x807290f in pcap_loop ()
#7  0x8049c37 in InterfaceThread (arg=0x0) at snort.c:1385
#8  0x804883b in main (argc=11, argv=0xbffff6cc) at snort.c:442
#9  0x80e8982 in __libc_start_main (main=0x80481dc <main>, argc=11, ubp_av=0xbffff6cc, init=0x80480b4 <_init>, fini=0x8141960 <_fini>, rtld_fini=0, stack_end=0xbffff6c4)
    at ../sysdeps/generic/libc-start.c:129
(gdb) p node
$1 = (TagNode *) 0x858f478
(gdb) p *node
$2 = {sip = xxxxxx, dip = xxxxx, sp = 1373, dp = 80, proto = 6 '\006', seconds = 991422502, packets = 0, bytes = 0, metric = 1, mode = 1, last_access = 0, otn = 0x0, next = 0x0, 
  prev = 0x38}

sip and dip was the same.

prev is getting set to something odd.

I'm trying out a ruleset with tons of tags to play 
-- 
Chris Green <cmg at ...81...>
"Yeah, but you're taking the universe out of context."




More information about the Snort-devel mailing list