[Snort-devel] [ snort-Bugs-550440 ] Snort fails on OpenBSD Sparc64

noreply at ...12... noreply at ...12...
Thu May 2 09:53:09 EDT 2002


Bugs item #550440, was opened at 2002-04-30 00:06
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=550440&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nick Kosovich (nulldetector)
Assigned to: Nobody/Anonymous (nobody)
Summary: Snort fails on OpenBSD Sparc64

Initial Comment:
Howdy all,

I have a strange issue running the latest rev of snort 
(1.8.6) on an OpenBSD 3.0 Sparc64 box:

Installation & Compiling are no problem however; when 
I do a snort -T with the default snort.conf file, I 
get many error messages pertaining to the snort.conf 
rules and a core dump. After some tweaking with the 
snort.conf file, the only way I can get snort to run 
without a coredump is by commenting out the following
directives:

preprocessor frag2

preprocessor stream4_reassemble

include $RULE_PATH/bad-traffic.rules
include $RULE_PATH/exploit.rules
include $RULE_PATH/scan.rules
include $RULE_PATH/finger.rules
include $RULE_PATH/ftp.rules
include $RULE_PATH/telnet.rules
include $RULE_PATH/smtp.rules
include $RULE_PATH/rpc.rules
include $RULE_PATH/rservices.rules
include $RULE_PATH/dos.rules
include $RULE_PATH/ddos.rules
include $RULE_PATH/dns.rules
include $RULE_PATH/tftp.rules
include $RULE_PATH/web-cgi.rules
include $RULE_PATH/web-coldfusion.rules
include $RULE_PATH/web-iis.rules
include $RULE_PATH/web-frontpage.rules
include $RULE_PATH/web-misc.rules
include $RULE_PATH/web-attacks.rules
include $RULE_PATH/sql.rules
include $RULE_PATH/x11.rules
include $RULE_PATH/icmp.rules
include $RULE_PATH/netbios.rules
include $RULE_PATH/misc.rules
include $RULE_PATH/attack-responses.rules


With these options commented out, snort will only 
alert portscan options and nothing else.  


----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=550440&group_id=3357




More information about the Snort-devel mailing list