[Snort-devel] snort.core Build 74

David liud at ...902...
Tue Oct 23 16:29:06 EDT 2001


I run snort on my Freebsd 4.4 system by:

snort -I -Afast -D -dev -l /var/log/snort -h 192.168.0.1/24 -i xl0 -c snort.conf # Is this correct?

Version 1.8.1-RELEASE (Build 74)My interface is:

$ ifconfig -a

ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet6 fe80::210:5aff:fe9d:34e6%xl0 prefixlen 64 scopeid 0x2
        inet 216.77.240.142 netmask 0xfffffc00 broadcast 216.77.243.255
        ether 00:10:5a:9d:34:e6 <- 3Com PCI 3c905B card


Connection attempt to TCP 216.77.240.142:25 from 24.147.1.156:35806
pid 456 (snort), uid 0: exited on signal 11 (core dumped)
xl0: promiscuous mode disabled

gdb snort snort.core
GNU gdb 4.18
This GDB was configured as "i386-unknown-freebsd"...(no debugging symbols found)...
Core was generated by `snort'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libpcap.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/libm.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/libssl.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/libcrypto.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/libc.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/libexec/ld-elf.so.1...(no debugging symbols found)...done.
#0  0x8074932 in strlcat ()
(gdb) bt
#0  0x8074932 in strlcat ()
#1  0x8074979 in strlcat ()
#2  0x8074d17 in strlcat ()
#3  0x8078567 in strlcat ()
#4  0x8076e8c in strlcat ()
#5  0x805656f in sigprocmask ()
#6  0x804b21f in sigprocmask ()
#7  0x280b76b9 in pcap_read () from /usr/lib/libpcap.so.2
#8  0x280b732f in pcap_loop () from /usr/lib/libpcap.so.2
#9  0x804c750 in sigprocmask ()
#10 0x804b0e0 in sigprocmask ()
#11 0x804a9a9 in sigprocmask ()
(gdb) quit

I recompiled it with symbols so if it happens again, I will send the results to you.

Thanks,

David Liu.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20011023/d662e0d7/attachment.html>


More information about the Snort-devel mailing list