[Snort-users] Garbage Packet with Null Pointer discarded?

Martin Roesch roesch at ...421...
Wed Sep 20 16:43:26 EDT 2000


Sounds like a debug message in the defrag code, let's see...

Which version of Snort are you running?  If you're running 1.6.3, you can
apply the following patch:

--- snort-1.6.3/spp_defrag.c    Fri Jul 14 13:49:06 2000
+++ snort-1.6.3-defrag/spp_defrag.c     Wed Sep 20 16:39:59 2000
@@ -536,7 +536,9 @@
 
        if(!p || !p->pkt || !p->pkt || !p->iph)
        {
+#ifdef DEBUG
                ErrorMessage("%s\n","Garbage Packet with Null Pointer
discarded!");
+#endif
                return;
        }
        if (p->frag_flag) {  /* heads up, live fragments inbound  */

Otherwise you can apply the patch manually be searching the spp_defrag.c file
for "Garbage" and putting in the #ifdef's yourself.

     -Marty

Daniel Swan wrote:
> 
> "Garbage Packet with Null Pointer discarded!"
> 
> I'm getting tons of these every minute in /var/log/messages.  Otherwise, snort seems to be working ok.
> 
> What are they?
> 
> Thanks in advance,
> Dan.
> 
> --== Sent via Deja.com http://www.deja.com/ ==--
> Before you buy.
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users

-- 
Martin Roesch
roesch at ...421...
http://www.snort.org



More information about the Snort-users mailing list