[Snort-devel] Re: Redhat 5.2 snort segmentation fault

Thomas Marsh marsht1 at ...634...
Sat Sep 1 15:54:04 EDT 2001


I modified the config.h file by hand:

from

#define PACKAGE 1
#define VERSION 1

to

#define PACKAGE "1"
#define VERSION "1"

and now it runs!

Thomas Marsh wrote:
> 
> Marty:
> 
> I looked in Makefile, and it has VERSION = 1.8.1-RELEASE
> 
> is this correct?
> 
> Makefile, however had SHELL = @SHELL@ , and would not run, so I changed
> it to SHELL = /bin/sh
> 
> is this correct?
> 
> I'm asking all these questions cause I'm having trouble figuring out how
> to upgrade my automake / autoconf
> 
> TIA
> 
> Tom
> 
> Martin Roesch wrote:
> >
> > Looks like the VERSION #define didn't get filled in.  You probably have
> > an ancient version of automake/autoconf, try upgrading then do a 'make
> > distclean && ./configure && make' and see what happens.
> >
> >     -Marty
> >
> > Thomas Marsh wrote:
> > >
> > > Red Hat Linux release 5.2 (Apollo)
> > > Kernel 2.0.36 on an i586 (AMD 450)
> > >
> > > snort -v
> > >
> > > core'd :
> > >
> > > [root at ...635... snort-1.8.1-RELEASE]# ./snort -v
> > > snort.c:665: Parsing command line...
> > > snort.c:683: Processing cmd line switch: v
> > > snort.c:1126: Verbose Flag active
> > > snort.c:1220: pcap_cmd is NULL
> > > Log directory =
> > >
> > >         --== Initializing Snort ==--
> > > snort.c:256: Opening interface: eth0
> > >
> > > Initializing Network Interface eth0
> > > snaplength info: set=1514/compiled=1514/wanted=0
> > > Writing PID file to
> > > snort.c:301: Setting Packet Processor
> > > Decoding Ethernet on interface eth0
> > >
> > >         --== Initialization Complete ==--
> > > Segmentation fault
> > > [root at ...635... snort-1.8.1-RELEASE]# gdb snort core
> > > GNU gdb 4.17.0.4 with Linux/x86 hardware watchpoint and FPU support
> > > Copyright 1998 Free Software Foundation, Inc.
> > > GDB is free software, covered by the GNU General Public License, and you
> > > welcome to change it and/or distribute copies of it under certain condit
> > > Type "show copying" to see the conditions.
> > > There is absolutely no warranty for GDB.  Type "show warranty" for detai
> > > This GDB was configured as "i386-redhat-linux"...
> > > Core was generated by `./snort -v'.
> > > Program terminated with signal 11, Segmentation fault.
> > > Reading symbols from /lib/libm.so.6...done.
> > > Reading symbols from /lib/libnsl.so.1...done.
> > > Reading symbols from /usr/lib/libpq.so.1...done.
> > > Reading symbols from /lib/libc.so.6...done.
> > > Reading symbols from /lib/libcrypt.so.1...done.
> > > Reading symbols from /lib/ld-linux.so.2...done.
> > > Reading symbols from /lib/libnss_files.so.1...done.
> > > #0  0x40069b1e in _IO_vfprintf (s=0xbfffd60c,
> > >     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> > > (roesch at ...402..., www.snort.org)\n", ap=0xbffffcc8) at vfprintf.c:
> > > vfprintf.c:1080: No such file or directory.
> > > (gdb) bt
> > > #0  0x40069b1e in _IO_vfprintf (s=0xbfffd60c,
> > >     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> > > (roesch at ...402..., www.snort.org)\n", ap=0xbffffcc8) at vfprintf.c:
> > > #1  0x4006cad3 in buffered_vfprintf (s=0x8098ef8,
> > >     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> > > (roesch at ...402..., www.snort.org)\n", args=0xbffffcc4) at vfprintf.
> > > #2  0x400684f3 in _IO_vfprintf (s=0x8098ef8,
> > >     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> > > (roesch at ...402..., www.snort.org)\n", ap=0xbffffcc4) at vfprintf.c:
> > > #3  0x4006f291 in fprintf (stream=0x8098ef8,
> > >     format=0x8083813 "\n-*> Snort! <*-\nVersion %s (Build %s)\nBy Martin
> > > (roesch at ...402..., www.snort.org)\n") at fprintf.c:34
> > > #4  0x804c5dd in DisplayBanner () at snort.c:2166
> > > #5  0x804a5cb in main (argc=2, argv=0xbffffd78) at snort.c:349
> > > (gdb) quit
> > > [root at ...635... snort-1.8.1-RELEASE]#
> > >
> > > --
> > > Tom Marsh
> > >
> > > mailto:marsht1 at ...634...
> > > http://www.nitesco.com
> >
> > --
> > Martin Roesch
> > roesch at ...402...
> > http://www.sourcefire.com - http://www.snort.org
> 
> --
> Tom Marsh
> 
> mailto:marsht1 at ...634...
> http://www.nitesco.com

-- 
Tom Marsh

mailto:marsht1 at ...634...
http://www.nitesco.com




More information about the Snort-devel mailing list