[Snort-devel] segmentation fault in snort 3.0.0-a3 with hyperscan search engine

Russ rucombs at ...3461...
Tue Feb 23 16:04:29 EST 2016


This should be fixed with build 188 available on github 
(https://github.com/snortadmin/snort3.git).

Thanks for reporting the issue.
Russ

On 2/15/16 7:09 AM, Russ wrote:
> Can you send you conf and rules please?
>
> On 2/15/16 5:03 AM, Ramya Potluri wrote:
>> Hi
>>
>> I am trying to run snort3 with hyperscan as the search method by adding
>> search_engine =
>> {
>>      search_method = 'hyperscan',
>> }
>> to the snort.lua, I tried remaining all methods like 
>> ac_full,ac_bnfa,ac_banded,ac_sparse,ac_sparse_bands in this search 
>> method, all these were fine but the hyperscan option was causing 
>> segmentation fault. and my machine configurations are
>> linux 3.10.0-123.el7.x86_64
>> snort: snort 3.0.0-a3
>> daq: daq-2.0.6
>> hyperscan: hyperscan-4.0.1
>> regel: ragel-6.9
>> here I am adding the log that I got with hyperscan search method and 
>> the gdb log
>> can you please help me out
>>
>> regards,
>> Ramya Potluri
>>
>>
>> ------------------------------------------------------------------------------
>> Site24x7 APM Insight: Get Deep Visibility into Application Performance
>> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
>> Monitor end-to-end web transactions and take corrective actions now
>> Troubleshoot faster and improve end-user experience. Signup Now!
>> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>>
>>
>> _______________________________________________
>> Snort-devel mailing list
>> Snort-devel at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>> Archive:
>> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>>
>> Please visithttp://blog.snort.org  for the latest news about Snort!
>
>
>
> ------------------------------------------------------------------------------
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20160223/aa674c9c/attachment.html>


More information about the Snort-devel mailing list