[Snort-devel] Snort Segmentation Fault

z@@f@...3370... @}{m3D go2zaafar at ...2499...
Thu Feb 14 13:05:09 EST 2013


Hello,

I was running BotHunter ( latest, the one that uses "Snort 2.9.2.3 +
applied numerous stability (bug) fixes." ) and snort was crashing on my
500GB pcap file. Upon digging into the main cause, there was a dns query
that was crashing snort.

Here (http://sysnet.org.pk/upload/theOne.pcap) is the pcap file containing
only 1 packet that crashes snort. To testing this pcap, use
"115.186.147.79" as your HOME_NET. I bypassed this bug by removing this IP
from the list of HOME_NET.

Regards,
Zaafar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20130214/f027c953/attachment.html>


More information about the Snort-devel mailing list