[Snort-devel] BUS ERROR in frag2 preprocessor?

Ricardo A. Gorosito rgorosito at ...1077...
Tue Jan 22 06:47:12 EST 2002


On RedHat 6.2:

snort -v OK.

./snort -u snort -g snort -d -b -i eth0 -l /var/log/snort -c
/etc/snort/snort-wo-frag2.conf -L snort-1.log OK.
snort-wo-frag2.conf is default .conf without preprocessor frag2

idem but with frag2: die on large ICMPs (>1472bytes of data, 1500 bytes
of packet = MTU ?!?!?)

On Aurora 0.2:
snort -v : BUS ERROR



--
Ricardo Ariel Gorosito - rgorosito at ...1077...
 Administración Federal de Ingresos Públicos
      Departamento Seguridad Informática


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20020122/7ca790a5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rgorosito.vcf
Type: text/x-vcard
Size: 359 bytes
Desc: Tarjeta de Ricardo A. Gorosito
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20020122/7ca790a5/attachment.vcf>


More information about the Snort-devel mailing list