[Snort-devel] Windows Server 2008 Standard x86 and sensitive-data.rules crashing

Michael Steele michaels at ...2826...
Sun Apr 24 09:10:51 EDT 2011


We are moving a single sensor to Server 2008 Standard x86 (SP2) for testing,
and have installed all the latest stable releases of Snort and the rules.

When Snort is ran in test mode (-T), Snort crashes.

Problem signature:
  Problem Event Name:	APPCRASH
  Application Name:	snort.exe
  Application Version:	0.0.0.0
  Application Timestamp:	4d6bee97
  Fault Module Name:	ntdll.dll
  Fault Module Version:	6.0.6002.18327
  Fault Module Timestamp:	4cb73436
  Exception Code:	c0000005
  Exception Offset:	000673dd
  OS Version:	6.0.6002.2.2.0.272.7
  Locale ID:	1033
  Additional Information 1:	e0db
  Additional Information 2:	e7f302e56a308d08c2241ce00f9533a4
  Additional Information 3:	76e5
  Additional Information 4:	433447cb6324885dd898e259eeaa4d08

Going into the sensitive-data.rules file, all the rules must be disabled
before Snort will run.

This is not happening with Server 2003, or XP with the exact same
configuration.

Any help will be greatly appreciated, possibly a bug?

Kindest regards,
Michael...

WINSNORT.com Management Team Member





More information about the Snort-devel mailing list