[Snort-devel] spp_portscan crash

Storms of Perfection ancient at ...396...
Wed May 9 19:21:47 EDT 2001


Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libpcap.so.2...done.
Reading symbols from /usr/lib/libm.so.2...done.
Reading symbols from /usr/lib/libssl.so.2...done.
Reading symbols from /usr/lib/libcrypto.so.2...done.
Reading symbols from /usr/lib/libc.so.4...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  0x804f230 in SyslogAlert (p=0x0,
     msg=0xbfbff580 "spp_portscan: PORTSCAN DETECTED from 208.141.46.249 
(THRESHOLD 5 connections exceeded in 8 seconds)",
     arg=0x0) at log.c:893
893         ds_ptr = (PriorityData *) otn_tmp->ds_list[PLUGIN_PRIORITY_NUMBER];
(gdb) bt
#0  0x804f230 in SyslogAlert (p=0x0,
     msg=0xbfbff580 "spp_portscan: PORTSCAN DETECTED from 208.141.46.249 
(THRESHOLD 5 connections exceeded in 8 seconds)",
     arg=0x0) at log.c:893
#1  0x8055804 in CallAlertPlugins (p=0x0,
     message=0xbfbff580 "spp_portscan: PORTSCAN DETECTED from 
208.141.46.249 (THRESHOLD 5 connections exceeded in 8 seconds)") at 
rules.c:3445
#2  0x80557a6 in CallAlertFuncs (p=0x0,
     message=0xbfbff580 "spp_portscan: PORTSCAN DETECTED from 
208.141.46.249 (THRESHOLD 5 connections exceeded in 8 seconds)", head=0x0) 
at rules.c:3419
#3  0x805aaf9 in PortscanPreprocFunction (p=0xbfbff68c) at spp_portscan.c:953
#4  0x80556af in Preprocess (p=0xbfbff68c) at rules.c:3358
#5  0x804b1d9 in ProcessPacket (user=0x0, pkthdr=0x80a5364, pkt=0x80a5376 
"") at snort.c:501
#6  0x280adc59 in pcap_read () from /usr/lib/libpcap.so.2
#7  0x280ad8ff in pcap_loop () from /usr/lib/libpcap.so.2
#8  0x804c486 in InterfaceThread (arg=0x0) at snort.c:1377
#9  0x804b0c4 in main (argc=5, argv=0xbfbffc38) at snort.c:434





More information about the Snort-devel mailing list