[Snort-devel] 1.8.2 AND 1.8.3(bld 87) OpenBSD core dump

Michael Graham mg228815 at ...973...
Wed Nov 21 08:49:02 EST 2001


OpenBSD 2.9
Sparc5
1 active interface

This might just be chaff, but I'm hoping this will be useful.  Nothing
else bus errors on this box, no matter what load I put on it.  


GDB from 1.8.2 core:

[root at ...974... snort-1.8.2]# gdb snort snort.core
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "sparc-unknown-openbsd2.9"...
Core was generated by `snort'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/libexec/ld.so...done.
gdb snort snort.core
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "sparc-unknown-openbsd2.9"...
Core was generated by `snort'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libz.so.1.3...done.
Reading symbols from /usr/lib/libpcap.so.1.1...done.
Reading symbols from /usr/lib/libm.so.0.1...done.
Reading symbols from /usr/local/lib/mysql/libmysqlclient.so.10.0...done.
Reading symbols from /usr/lib/libc.so.26.2...done.
#0  DecodeIP (pkt=0x9110e "E", len=1500, p=0xf7ffeaa8) at decode.c:1194
1194        if(p->iph->ip_ver != 4)
(gdb) bt
#0  DecodeIP (pkt=0x9110e "E", len=1500, p=0xf7ffeaa8) at decode.c:1194
#1  0xdf2c in DecodeEthPkt (p=0xf7ffeaa8, pkthdr=0x91000, pkt=0x91100
"")
    at decode.c:85
#2  0x34ec in ProcessPacket (user=0x0, pkthdr=0x91000, pkt=0x91100 "")
    at snort.c:486
#3  0x46cc0 in RebuildFrag (ft=0x65c080, p=0x14) at spp_frag2.c:752
#4  0x464c8 in Frag2Defrag (p=0xf7fff0b8) at spp_frag2.c:472
#5  0x14bd4 in Preprocess (p=0xf7fff0b8) at rules.c:3508
#6  0x3614 in ProcessPacket (user=0x0, pkthdr=0x69000, pkt=0x853fe "")
    at snort.c:536
#7  0x80850a4 in pcap_read ()
#8  0x8095c24 in pcap_loop ()
#9  0x6270 in InterfaceThread (arg=0x693d4) at snort.c:1663
#10 0x34b0 in main (argc=431060, argv=0xf7fff734) at snort.c:469
(gdb) quit
[root at ...974... snort-1.8.2]#


GDB from 1.8.3 bld87 core:

 [root at ...974... snort]# gdb snort snort.core
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "sparc-unknown-openbsd2.9"...
Core was generated by `snort'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libz.so.1.3...done.
Reading symbols from /usr/lib/libpcap.so.1.1...done.
Reading symbols from /usr/lib/libm.so.0.1...done.
Reading symbols from /usr/local/lib/mysql/libmysqlclient.so.10.0...done.
Reading symbols from /usr/lib/libc.so.26.2...done.
#0  DecodeIP (pkt=0x9110e "E", len=1500, p=0xf7ffeab8) at decode.c:1194
1194        if(p->iph->ip_ver != 4)
(gdb) bt
#0  DecodeIP (pkt=0x9110e "E", len=1500, p=0xf7ffeab8) at decode.c:1194
#1  0xdf2c in DecodeEthPkt (p=0xf7ffeab8, pkthdr=0x91000, pkt=0x91100
"")
    at decode.c:85
#2  0x34ec in ProcessPacket (user=0x0, pkthdr=0x91000, pkt=0x91100 "")
    at snort.c:486
#3  0x46cc0 in RebuildFrag (ft=0x6d8580, p=0x14) at spp_frag2.c:752
#4  0x464c8 in Frag2Defrag (p=0xf7fff0c8) at spp_frag2.c:472
#5  0x14bd4 in Preprocess (p=0xf7fff0c8) at rules.c:3508
#6  0x3614 in ProcessPacket (user=0x0, pkthdr=0x69000, pkt=0x86d5a "")
    at snort.c:536
#7  0x80850a4 in pcap_read ()
#8  0x8095c24 in pcap_loop ()
#9  0x6270 in InterfaceThread (arg=0x693d4) at snort.c:1663
#10 0x34b0 in main (argc=431060, argv=0xf7fff744) at snort.c:469
(gdb) quit
[root at ...974... snort]#

Michael Graham
FedEx Services
CCSA CCSE





More information about the Snort-devel mailing list