[Snort-devel] SNORT_PP_DEBUG not functioning

Russ Combs rcombs at ...402...
Mon Apr 8 15:57:53 EDT 2013


On Mon, Apr 8, 2013 at 3:55 PM, Jeffrey Karrels
<jeff.karrels at ...3390...> wrote:
> System Architecture: x86_64
> Operating System and version: Linux localhost.localdomain
> 3.8.2-206.fc18.x86_64 #1 SMP
> Version of Snort: 2.9.4
> What preprocessors you loaded: Default
> What rules (if any) you were using: Default
> What output plug-ins you loaded: Default
> What command line switches you were using: -i eth1 -C -c
> /etc/snort/snort.conf -l /var/log/snort
> Any Snort error messages: N/A
> Environmental Variables: SNORT_PP_DEBUG=0x0000000E00000000
> Compile Flags: --enable-dbg --enable-dbg-msgs
>
> The Preprocessor debug messages do not display even when the proper
> configuration options and environmental flags are set. debug.c is shifting
> the bits out of the variable erroneously as they are already in the upper 32
> if they are copied from snort_debug.h. Perhaps the intended format is to
> always use the lower 32 bits, but that is not clear from the snort_debug.h
> file...
>
You should be using 0x0000000E.
>
> --- debug.c 2013-04-08 15:37:28.325059557 -0400
> +++ debug_org.c 2013-04-08 15:50:42.204691127 -0400
> @@ -65,7 +65,7 @@
>      if ( key )
>          debug_level = strtoul(key, NULL, 0);
>
> -    //debug_level <<= 32;
> +    debug_level <<= 32;
>
>      key = getenv(DEBUG_VARIABLE);
>
>




More information about the Snort-devel mailing list