[Snort-devel] [ snort-Bugs-552950 ] Leaking bpf file descriptors

noreply at ...12... noreply at ...12...
Sat May 11 20:04:03 EDT 2002


Bugs item #552950, was opened at 2002-05-06 10:40
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=552950&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Leaking bpf file descriptors

Initial Comment:
Under older versions of openBSD 2.7 , 2.6 (only ones 
i've tested) the following code causes bpf devices to 
stay open after a kill -HUP of snort

snort.c

#ifndef HPUX
        /* kludge for Linux */
        InitializeInterfaces();
#endif /* HPUX */

Commenting out the InitializeInterfaces seems to fix 
the problem.

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2002-05-08 14:28

Message:
Logged In: NO 

affects FREEBSD 4.5 also.
lsof  grep dev/bpf shows one bpf

HUP snort, lsoft | grep /dev/bpf shows 2, etc till you use 
them all up.



----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=552950&group_id=3357




More information about the Snort-devel mailing list