[Snort-devel] Snort exited on signal 6

sockstat sockstat at ...445...
Thu Sep 12 02:31:42 EDT 2013


Can you start snort in gdb? Like gdb /usr/local/bin/snort.
Then: set args ......
The arguments you give snort to startup? Then type run. When the assert happens can you type bt? Meaning backtrace? That would help. It might just be that the snort developers already have enough info with your current mail though. Just trying to help. Thanks, Reinoud

-------- Original message --------
From: Mike <gmm at ...3433...>
Date: 09/11/2013  11:02 PM  (GMT-08:00)
To: snort-devel at lists.sourceforge.net
Subject: [Snort-devel] Snort exited on signal 6

Hi everyone,

in my new setup Snort exited on signal 6 shortly after start

Sep 11 17:26:41 snort kernel: pid 1663 (snort), uid 40000: exited on signal 6

Here is some information in /tmp/snort.debug:

Assertion failed: (b < HTTP_BUFFER_MAX && buf), function SetHttpBufferEncoding, file ../../src/detection_util.h, line 142.

snort -V

   ,,_     -*> Snort! <*-
  o"  )~   Version 2.9.5.3 GRE (Build 132) FreeBSD
   ''''    By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using libpcap version 1.4.0
           Using PCRE version: 8.33 2013-05-28
           Using ZLIB version: 1.2.7

Should I provide some additional info?

Mike.


------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20130911/08783ce6/attachment.html>


More information about the Snort-devel mailing list