[Snort-devel] spp_portscan crash

Todd Lewis tlewis at ...255...
Sat May 12 13:48:50 EDT 2001


I've written a diagnostic thingie that dumps the state of the tcp sessions
and am testing it before sending it out for the stream3 users to try out.
In so doing, I've run into two problems.  First, the spo_database problem
is still there; it can't find PQsetdbLogin.  Second, I get this:

Program received signal SIGSEGV, Segmentation fault.
0x40074e36 in chunk_free () at malloc.c:2824
malloc.c:2824: No such file or directory.
(gdb) backtrace
#0  0x40074e36 in chunk_free () at malloc.c:2824
#1  0x40074d01 in __cfree () at malloc.c:2684
#2  0x805a3e0 in RemoveSource (delSource=0x84ae308) at spp_portscan.c:454
#3  0x805a49f in ExpireConnections (scanList=0x812a210, watchPeriod={tv_sec = 3,
      tv_usec = 0}, currentTime={tv_sec = 989689526, tv_usec = 77099})
    at spp_portscan.c:563
#4  0x805a7ca in PortscanPreprocFunction (p=0xbffff5e4) at spp_portscan.c:893
#5  0x8055c27 in Preprocess (p=0xbffff5e4) at rules.c:3358
#6  0x804c088 in ProcessPacket (user=0x0, pkthdr=0xbffffa74, pkt=0x81283d0 "")
    at snort.c:509
#7  0x80721fa in pcap_read_packet ()
#8  0x8072129 in pcap_read ()
#9  0x8072923 in pcap_loop ()
#10 0x804d32f in InterfaceThread (arg=0x0) at snort.c:1385
#11 0x804bf64 in main (argc=3, argv=0xbffffba0) at snort.c:442
(gdb)

spp_portscan doesn't pertain to what I'm doing, so I'll just comment it
out of the conf, but I thought that I would report this anyway.  If anyone
wants more info, I'm happy to provide it.

--
Todd Lewis
tlewis at ...255...





More information about the Snort-devel mailing list