[Snort-users] Error message in /var/log/messages.

Fyodor fygrave at ...121...
Thu Jan 4 06:12:27 EST 2001


On Thu, Jan 04, 2001 at 11:07:23AM +0100, Prins, J.H. wrote:
> After installing snort and asking a friend of mine to do a portscan I found
> the following in my /var/log/messages
> Is this familiar to anyone?
> 
> Jan  4 10:49:59 cerberus kernel: *pde = 02f96063
> Jan  4 10:49:59 cerberus kernel: *pte = 00000000
> Jan  4 10:49:59 cerberus kernel: Oops: 0000
> Jan  4 10:49:59 cerberus kernel: CPU:    0
> Jan  4 10:49:59 cerberus kernel: EIP:
> 0010:[lockd:__insmod_lockd_O/lib/modules/2.2.14-5.0/fs/lockd.o_M38C5B70+-369
> 91/96]
> Jan  4 10:49:59 cerberus kernel: EFLAGS: 00010246
> Jan  4 10:49:59 cerberus kernel: eax: c3850e9c   ebx: c1c93cf4   ecx:


it doesn't look like snort is the cause of death here. it looks
like the scan crashed your nfs kernel module. Any information what
kind of scan the guy was conducting? This looks interesting, I haven't
seen any nfs kernel module probs reported yet :)




More information about the Snort-users mailing list