[Snort-devel] snort-2.0.1 with mysql and libpcap-0.7.2

boka boka at ...2155...
Tue Sep 2 05:26:10 EDT 2003


Hi !

My conf is: redhat 7.0 with all previous erratas added, 2.2.25 kernel.

I want to run snort-2.0.1 with mysql and libpcap-0.7.2 to support many 
interfaces in my machine.

libpcap compiled with following options to configure:
./configure --prefix=/usr/local/libpcap-0.7.2 
--exec-prefix=/usr/local/libpcap-0.7.2

snort compiled with following options to configure:
./configure --exec-prefix=/usr --prefix=/usr --sysconfdir=/etc/snort 
--with-mysql --with-libpcap-includes=/usr/local/libpcap-0.7.2/include 
--with-libpcap-libraries=/usr/local/libpcap-0.7.2/lib

After compilation, i have core dumps when trying to run snort. strace 
looks like:

[root at ...2156... snort-2.0.1]# strace ./src/snort
execve("./src/snort", ["./src/snort"], [/* 25 vars */]) = 0
uname({sys="Linux", node="filtr", ...}) = 0
brk(0)                                  = 0x821dc80
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or 
directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, 0xbfffec0c)                  = -1 ENOSYS (Function not 
implemented)
fstat(3, {st_mode=S_IFREG|0644, st_size=14800, ...}) = 0
old_mmap(NULL, 14800, PROT_READ, MAP_PRIVATE, 3, 0) = 0x127000
close(3)                                = 0
open("/usr/lib/libz.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\31\0"..., 
1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=59906, ...}) = 0
old_mmap(NULL, 55044, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x12b000
mprotect(0x137000, 5892, PROT_NONE)     = 0
old_mmap(0x137000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 
0xb000) = 0x137000
close(3)                                = 0
open("/lib/libm.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340H\0"..., 
1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=619298, ...}) = 0
old_mmap(NULL, 142656, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x139000
mprotect(0x15b000, 3392, PROT_NONE)     = 0
old_mmap(0x15b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 
0x21000) = 0x15b000
close(3)                                = 0
open("/lib/libnsl.so.1", O_RDONLY)      = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200?\0"..., 
1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=448433, ...}) = 0
old_mmap(NULL, 92000, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x15c000
mprotect(0x16f000, 14176, PROT_NONE)    = 0
old_mmap(0x16f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 
0x12000) = 0x16f000
old_mmap(0x171000, 5984, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x171000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\304\1"..., 
1024) = 1024
fstat(3, {st_mode=S_IFREG|0755, st_size=5723959, ...}) = 0
old_mmap(NULL, 1269096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x173000
mprotect(0x2a0000, 36200, PROT_NONE)    = 0
old_mmap(0x2a0000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 
3, 0x12c000) = 0x2a0000
old_mmap(0x2a5000, 15720, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2a5000
close(3)                                = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, 
-1, 0) = 0x2a9000
--- SIGSEGV (Segmentation fault) ---
+++ killed by SIGSEGV +++

greetz
boka





More information about the Snort-devel mailing list