[Snort-devel] linux/sparc BUS ERROR [more info]

Ricardo A. Gorosito rgorosito at ...1077...
Tue Jan 15 11:25:04 EST 2002


Now with snort compiled with -g:

[root at ...1078... snort-1.8.3]# gdb /usr/local/bin/snort -c core
GNU gdb Red Hat Linux (5.1-0.1sparc)
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "sparc-redhat-linux"...

warning: "/home/soft/snort/snort-1.8.3/core": no core file handler
recognizes format, using default
Core was generated by `/usr/local/bin/snort -v'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/lib/libpcap.so.0.6.2...done.
Loaded symbols for /usr/lib/libpcap.so.0.6.2
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
#0  0x00105000 in ?? ()
(gdb) bt
#0  0x00105000 in ?? ()
(gdb) set args -v
(gdb) run
Starting program: /usr/local/bin/snort -v
Log directory = /var/log/snort

Initializing Network Interface eth4

        --== Initializing Snort ==--
Checking PID path...
PATH_VARRUN is set to /var/run/ on this operating system
PID stat checked out ok, PID set to /var/run/
Writing PID file to "/var/run/"
Decoding Ethernet on interface eth4

        --== Initialization Complete ==--

-*> Snort! <*-
Version 1.8.3 (Build 88)
By Martin Roesch (roesch at ...402..., www.snort.org)

Program received signal SIGBUS, Bus error.
0x00018b44 in PrintIPHeader (fp=0x7026b278, p=0xeffff3b8) at log.c:1594
1594                    fputs(inet_ntoa(p->iph->ip_src), fp);
(gdb) bt
#0  0x00018b44 in PrintIPHeader (fp=0x7026b278, p=0xeffff3b8) at
log.c:1594
#1  0x000173e8 in PrintIPPkt (fp=0x7026b278, type=1, p=0xeffff3b8) at
log.c:520
#2  0x00012834 in ProcessPacket (user=0x0, pkthdr=0x6e800,
pkt=0xeffff3b8 "ïÿø\230") at snort.c:493
#3  0x700336f8 in pcap_read_packet (handle=0x930c0, callback=0x127e0
<ProcessPacket>, userdata=0x0) at ./pcap-linux.c:587
#4  0x700349e0 in pcap_loop (p=0x930c0, cnt=-1, callback=0x127e0
<ProcessPacket>, user=0x0) at ./pcap.c:79
#5  0x00014248 in InterfaceThread (arg=0x0) at snort.c:1663
#6  0x000127c8 in main (argc=0, argv=0xeffffb44) at snort.c:469
#7  0x7013d850 in __libc_start_main (main=0x11f60 <main>, argc=2,
ubp_av=0xeffffb44, init=0x11c48 <_init>, fini=0x7002d9ac
<_dl_debug_mask>,
    rtld_fini=0x7000f8e0 <_dl_fini>, stack_end=0xeffffc24) at
../sysdeps/generic/libc-start.c:129
(gdb)

In other machine:

[root at ...1079... snort-1.8.3]# gdb ./snort --core=core
GNU gdb Red Hat Linux (5.1-0.1sparc)
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "sparc-redhat-linux"...

warning: "/home/soft/snort/snort-1.8.3/core": no core file handler
recognizes format, using default
Core was generated by `snort -v'.
Program terminated with signal 10, Bus error.
Reading symbols from /usr/lib/libpcap.so.0.6.2...done.
Loaded symbols for /usr/lib/libpcap.so.0.6.2
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
#0  0x01010101 in ?? ()
(gdb) info registers
g0             0x0      0
g1             0x18     24
g2             0x30     48
g3             0x0      0
g4             0x4c494243       1279869507
g5             0xf0000000       -268435456
g6             0x40000000       1073741824
g7             0x8000   32768
o0             0x14     20
o1             0x93be0  605152
o2             0x92     146
o3             0xeffff2b0       -268438864
o4             0x1a4b0  107696
o5             0xeffff378       -268438664
sp             0x93bee  605166
o7             0x0      0
l0             0x45100084       1158676612
l1             0xc9994000       -912703488
l2             0x4006418f       1074151823
l3             0xa148d6f        169119087
l4             0xa148da4        169119140
l5             0x16b954 1489236
l6             0x28d39db8       684957112
l7             0x51b3a627       1370727975
i0             0x80182ee8       -2145898776
i1             0x43e20000       1138884608
i2             0x101080a        16844810
i3             0x286b77c        42383228
i4             0x282d7d0        42129360
i5             0xe9cb6679       -372545927
fp             0x425115d9       1112610265
i7             0xd8141153       -669773485
y              0x2e300047       774897735
psr            0x0      0       icc:----, pil:0, s:0, ps:0, et:0, cwp:0
wim            0x0      0
tbr            0x0      0
pc             0x1010101        16843009
npc            0xeffff24c       -268438964
fpsr           0xfffff800       -2048   rd:-, tem:31, ns:1, ver:7,
ftt:7, qne:1, fcc:>, aexc:0, cexc:0
cpsr           0x0      0
(gdb)

More info? what can I submit?

Thanks, Ricardo.


--
Ricardo Ariel Gorosito - rgorosito at ...1077...
 Administración Federal de Ingresos Públicos
      Departamento Seguridad Informática


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20020115/b7414825/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rgorosito.vcf
Type: text/x-vcard
Size: 359 bytes
Desc: Tarjeta de Ricardo A. Gorosito
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20020115/b7414825/attachment.vcf>


More information about the Snort-devel mailing list