[Snort-devel] UnixSock Bug

Chris Green cmg at ...402...
Sun Mar 31 18:32:14 EST 2002


Daniel J Camero <camero at ...1215...> writes:

> Arch: x86
> OS: OpenBSD 2.9
> No rules
> Switches: -A unsock

Snort Verison?  No rules meaning you're running with just the
preprocessor?

Looking at it, it seems that the alert stuff doesn't check for events
that don't have packets with it very well.  I don't have a easy setup
right now to play with unsock so try this one out.

Backtrace is garbage past the alert functions it appears

Try this version ( just replace the one you already have with this one
and recompile. )

-------------- next part --------------
A non-text attachment was scrubbed...
Name: spo_alert_unixsock.c
Type: application/octet-stream
Size: 5254 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20020331/0ae321c0/attachment.obj>
-------------- next part --------------


-- 
Chris Green <cmg at ...835...>
"Yeah, but you're taking the universe out of context."


More information about the Snort-devel mailing list