[Snort-devel] Solaris 8 crash

Steven Rudolph srudolph at ...1213...
Wed Apr 9 13:38:03 EDT 2003


Here is the output:

#0  0xff133084 in strlen () from /usr/lib/libc.so.1
#1  0xff182c58 in _doprnt () from /usr/lib/libc.so.1
#2  0xff18499c in snprintf () from /usr/lib/libc.so.1
#3  0x0005b10c in Database (p=0xffbef4e8, msg=0xa5390 "(snort_decoder):
T/TCP Detected", arg=0x2ae0b8,
    event=0xffbef240) at spo_database.c:1213
#4  0x00042e08 in CallLogPlugins (p=0xffbef4e8, message=0xa5390
"(snort_decoder): T/TCP Detected", args=0x0,
    event=0xffbef240) at detect.c:186
#5  0x00042c28 in CallLogFuncs (p=0xffbef4e8, message=0xa5390
"(snort_decoder): T/TCP Detected", head=0x0,
    event=0xffbef240) at detect.c:129
#6  0x00021c0c in DecodeTCPOptions (start=0x2357c8
"\002\004\005´\001\003\003", o_len=28, p=0xffbef4e8)
    at decode.c:3109
#7  0x0001fe80 in DecodeTCP (pkt=0x2357b4 "\021\221", len=48,
p=0xffbef4e8) at decode.c:2192
#8  0x0001f36c in DecodeIP (pkt=0x2357a0 "E", len=68, p=0xffbef4e8) at
decode.c:1880
#9  0x0001b208 in DecodeEthPkt (p=0xffbef4e8, pkthdr=0xffbef9e8,
pkt=0x235792 "") at decode.c:114
#10 0x00037f7c in ProcessPacket (user=0x0, pkthdr=0xffbef9e8,
pkt=0x235792 "") at snort.c:560
#11 0x00095fa0 in pcap_read ()
#12 0x00097220 in pcap_loop ()
#13 0x0003a5c0 in InterfaceThread (arg=0x0) at snort.c:1518
#14 0x00037f14 in SnortMain (argc=16, argv=0xffbefc74) at snort.

-----Original Message-----
From: Chris Green [mailto:cmg at ...402...] 
Sent: Wednesday, April 09, 2003 4:23 PM
To: Steven Rudolph
Cc: snort-devel at lists.sourceforge.net
Subject: Re: [Snort-devel] Solaris 8 crash


"Steven Rudolph" <srudolph at ...1213...> writes:

> I have looked in the BUGS file and the issue seems to be the lack of a

> core file.  That is why I set this: export SNORT_DEBUG=4294967295 and 
> ran snort.  Ok, I feel silly here but could you help me out on this?  
> Below is a portion of my earlier post:

Easiest way:

 gdb src/snort

 r -c etc/snort.conf <args>

 When snort crashes, type bt
-- 
Chris Green <cmg at ...402...>
I've had a perfectly wonderful evening. But this wasn't it.
     -- Groucho Marx
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3213 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030409/61ba3a2d/attachment.bin>


More information about the Snort-devel mailing list