[Snort-devel] Snort Core dumping

Cory Michal cmichal at ...1978...
Mon May 12 05:27:06 EDT 2003


I'm running Snort 2.0 on FreeBSD 4.7-RELEASE with connected to a postgresql
database for use with ACID.

The problem is it core dumps after about 4-9 hours worth of use. Is this a
known bug that I have to do something to fix. I can't figure out the problem
from the core dump, perhaps one of you knows.

Core dump below

gdb snort core
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read
called at
/usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line
2627 in elfstab_build_psymtabs
Deprecated bfd_read called at
/usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line
933 in fill_symbuf

Core was generated by `snort'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libpcap.so.2...done.
Reading symbols from /usr/lib/libm.so.2...done.
Reading symbols from /usr/lib/libpq.so.2...done.
Reading symbols from /usr/lib/libc.so.4...done.
Reading symbols from /usr/lib/libcrypt.so.2...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  0x8066498 in mwmSearchExNoBC (ps=0x9759000,
    Tx=0x809c060
"/703245/WINDING-LHP_720X300_HOT2.SWF?CLICKTAG=HTTP://AD.DOUBLECLICK.NET/CLI
CK;H=V2|2F99|3|0|*|Y;5508025;0-0;0;6935322;9362-720|300;2692161|2691078|1;;?
HTTP://WWW.CHEAPTICKETS.COM/TRS/CHEAPTICKETS/HOME"..., n=512,
    Tc=0x8123de0
"/703245/Winding-LHP_720x300_Hot2.swf?clickTag=http://ad.doubleclick.net/cli
ck;h=v2|2f99|3|0|*|y;5508025;0-0;0;6935322;9362-720|300;2692161|2691078|1;;?
http://www.cheaptickets.com/trs/cheaptickets/home"..., match=0x805d684
<otnx_match>, data=0x809bf34) at mwm.c:905
905                   if( patrn->psPatCase[0] == Tc[T-Tx] )






More information about the Snort-devel mailing list