[Snort-users] snort.alert and snort crashes.

Fyodor fygrave at ...121...
Sun Nov 12 15:44:33 EST 2000


On Sat, Nov 11, 2000 at 12:12:04AM -0600, C. Bensend wrote:
> 
> Hello folks,
> 
> 	I have two questions for you:
> 
> 1)  I am running snort on my borders.  My firewalls are
> running OpenBSD 2.7.  On one of the machines, snort has
> created a snort.alert file in the log directory.  This is
> A Good Thing(tm), it allows me to check for changes and
> email me any additional alerts Snort sees.  On the second
> OpenBSD firewall, it has not created a snort.alert file -
> I'm not sure why.  The config files are identical, except
> for the HOME_NET value.  Both systems are identical, except
> for hardware.  The md5 sums on both binaries are identical.
> Any ideas?
> 
> 2)  Snort craps itself upon recieving an nmap:
> 
> [benny at ...780... ~]$ snort -V
> 
> -*> Snort! <*-
> Version 1.6.3
> By Martin Roesch (roesch at ...66..., www.snort.org)
> 
>    On this machine, it just dies.  No coredump, nothing in

can you start snort as:

gdb snort -V
and show us what gdb would say :) (puh-leez ;-))


-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1



More information about the Snort-users mailing list