[Snort-devel] [ snort-Bugs-498871 ] Got null *froot

noreply at ...12... noreply at ...12...
Sun Jan 6 20:40:05 EST 2002


Bugs item #498871, was opened at 2002-01-03 01:11
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=498871&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Got null *froot

Initial Comment:
This seem to happen when I have the stream4
preprocessor enabled.  The following will occur in my
syslog:

Jan  2 18:00:01 snortserv snort: Got NULL *froot in
ReassembleIP(), please tell Dragos 
Jan  2 18:00:01 snortserv snort: Ran out of space

Then snort dies.  In my config if I use:

preprocessor stream4: memcap ????

And set a larger number it is longer before the above
happens.  So I presume it is a symptom of the limit set
being reached?

Some versions if it helps:

Snort - Version 1.8.3 (Build 88)
OS - FreeBSD 4.5-PRERELEASE #0


----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=498871&group_id=3357




More information about the Snort-devel mailing list