[Snort-users] Snort-1.6.3-beta4

Ralf Hildebrandt Ralf.Hildebrandt at ...22...
Tue Jul 18 04:32:50 EDT 2000


Am 18.07.2000 um 08:55:28 +0200 schrieb Ralf Hildebrandt folgendes:
> On Son, Jul 16, 2000 at 03:44:24 -0400, Martin Roesch wrote:
> 
> > http://host22-107.prestige.net/snort-1.6.3-beta4.tar.gz
> > 
> > Let me know how it works for you guys!
> 
> Seems to work for me (HP-UX 10.20)
> Haven't tried enabling the defrag prepocessor, though

Hmm, I tested the lateset (beta 5??) on FreeBSD 4.0 and HP-UX 10.20, and on
both I got "Garbage Packet with Null Pointer discarded!" messages in my log:

Jul 18 09:59:13 snort[84426]: Garbage Packet with Null Pointer discarded!
Jul 18 09:59:44 last message repeated 16 times
Jul 18 10:01:46 last message repeated 63 times
Jul 18 10:11:47 last message repeated 312 times
Jul 18 10:21:29 last message repeated 304 times                     

And on the HP-UX box snort died shortly afterwards.

I dropped the preprocessor: defrag from my rules and now it seems to run
again.

-- 
Ralf.Hildebrandt at ...22...
Dipl.-Informatiker                                        innominate AG
System Engineer                                       networking people
tel: +49.30.308806-62 fax: -77  web: http://innominate.de  pgp: /pgp/rh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 351 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20000718/867e3d8a/attachment.sig>


More information about the Snort-users mailing list