[Snort-devel] snort.core Build 74 with symbols

David liud at ...902...
Sun Oct 28 09:26:02 EST 2001


Hi,

Snort core dumps everytime I run it for a few hours.I run snort on my Freebsd 4.4 system by:

cd /usr/local/share/snort
/usr/local/bin/snort -I -Afull -D -de -l /var/log/snort -h 192.168.0.0/24 -i xl0 -c /usr/local/etc/snort.conf&

Version 1.8.1-RELEASE (Build 74)

My interface is:

$ ifconfig -a

ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 192.168.0.1 netmask 0xffffff00 broadcast 192.168.0.255 
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet6 fe80::210:5aff:fe9d:34e6%xl0 prefixlen 64 scopeid 0x2
        inet 216.77.240.142 netmask 0xfffffc00 broadcast 216.77.243.255
        ether 00:10:5a:9d:34:e6 <- 3Com PCI 3c905B card


gdb /usr/local/bin/snort snort.core
GNU gdb 4.18
This GDB was configured as "i386-unknown-freebsd"...
Core was generated by `snort'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libpcap.so.2...done.
Reading symbols from /usr/lib/libm.so.2...done.
Reading symbols from /usr/lib/libssl.so.2...done.
Reading symbols from /usr/lib/libcrypto.so.2...done.
Reading symbols from /usr/lib/libc.so.4...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  0x280b6587 in pcap_stats () from /usr/lib/libpcap.so.2
(gdb) bt
#0  0x280b6587 in pcap_stats () from /usr/lib/libpcap.so.2
#1  0x804ddd2 in DropStats (iParamIgnored=0) at snort.c:2990
#2  0x804cc9c in CleanExit (sig=1) at snort.c:2070
#3  0xbfbfffac in ?? ()
#4  0x28201695 in getprotoent () from /usr/lib/libc.so.4
#5  0x281eb899 in getprotobynumber () from /usr/lib/libc.so.4
#6  0x804d531 in InitProtoNames () at snort.c:2672
#7  0x804aacb in main (argc=13, argv=0xbfbffd18) at snort.c:110
#8  0x804a9a9 in _start ()


Thanks,

David Liu.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20011028/ef03aa75/attachment.html>


More information about the Snort-devel mailing list