[Snort-devel] Solaris 8 crash

Steven Rudolph srudolph at ...1213...
Wed Apr 9 12:56:06 EDT 2003


I got the debug working.

I have the full debug turned on and it seems to crash faster (minutes)
when this is on.

The log file is the same size no matter what when I run Snort.
Here are the last few lines:
detect.c:619: alert ICMP Chains   : detect.c:645: 65be4->detect.c:645:
6108c->detect.c:645: 606d4->detect.c:645: 45a24->detect.c:653:
detect.c:645: 65be4->detect.c:645: 6108c->detect.c:645:
45a24->detect.c:653:
detect.c:645: 62258->detect.c:645: 6108c->detect.c:645:
65be4->detect.c:645: 45a24->detect.c:653:
detect.c:645: 6108c->detect.c:645: 609e8->detect.c:645:
65be4->detect.c:645: 45a24->detect.c:653:
detect.c:645: 6108c->detect.c:645: 609e8->detect.c:645:
60d08->detect.c:645: 45a24->detect.c:653:
detect.c:645: 6108c->detect.c:645: 609e8->detect.c:645:
60d08->detect.c:645: 45a24->detect.c:653:
detect.c:645: 65be4->detect.c:645: 6108c->detect.c:645:
609e8->detect.c:645: 45a24->detect.c:653:
detect.c:645: 65be4->detect.c:645: 6108c->detect.c:645:
609e8->detect.c:645: 45a24->detect.c:653:
detect.c:645: 65be4->detect.c:645: 6108c->detect.c:645:
609e8->detect.c:645: 45a24->detect.c:653:
detect.c:645: 65be4->detect.c:645: 6108c->detect.c:645:
45a24->detect.c:653:
detect.c:645: 65be4->detect.c:645: 6108c->detect.c:645:
606d4->detect.c:645: 45a24->detect.c:653:
detect.c:645: 60130->detect.c:645: 6108c->detect.c:645:
609e8->detect.c:645: 60d08->detect.c:645: 65be4->detect.c:645:
45a24->detect.c:653:
detect.c:645: 60130->detect.c:645: 6108c->detect.c:645:
45a24->detect.c:653:
detect.c:645: 62258->detect.c:645: 60130->detect.c:645:
6108c->detect.c:645: 609e8->detect.c:645: 60d08->detect.c:645:
45a24->detect.c:653:
detect.c:645: 6108c->detect.c:6

-----Original Message-----
From: Chris Green [mailto:cmg at ...402...] 
Sent: Tuesday, April 08, 2003 4:11 PM
To: Steven Rudolph
Cc: snort-devel at lists.sourceforge.net
Subject: Re: [Snort-devel] Solaris 8 crash


"Steven Rudolph" <srudolph at ...1213...> writes:

Thanks, fixed.  I didn't run a debug build of it when prepping.

>
> I attempt to compile with --enable-debug and I get this error:
>
> gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -I../../src 
> -I../../src/output-plugins -I../../src/detection-plugins 
> -I../../src/preprocessors  -DBSD_COMP -I/usr/local/mysql/include/mysql

> -DENABLE_MYSQL  -O0 -DDEBUG -g -c `test -f 'sp_byte_check.c' || echo 
> './'`sp_byte_check.c
> sp_byte_check.c: In function `ByteTest':
> sp_byte_check.c:564: `offset' undeclared (first use in this function)
> sp_byte_check.c:564: (Each undeclared identifier is reported only once
> sp_byte_check.c:564: for each function it appears in.)
> make[3]: *** [sp_byte_check.o] Error 1
> make[3]: Leaving directory 
> `/usr/share/src/snort-2.0.0rc4/src/detection-plugins'
> make[2]: *** [all-recursive] Error 1
> make[2]: Leaving directory `/usr/share/src/snort-2.0.0rc4/src'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/usr/share/src/snort-2.0.0rc4'
> make: *** [all] Error 2
>
>
>
> Steve Rudolph, CCSA, CCSE
> Network Security Engineer
> Internet Operations Center

-- 
Chris Green <cmg at ...402...>
"Yeah, but you're taking the universe out of context."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3213 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030409/329b6db0/attachment.bin>


More information about the Snort-devel mailing list