[Snort-users] problem with snort 1.7 on sparc solaris 2.6

Bill Marquette wlmarque at ...8...
Wed Jan 10 16:15:12 EST 2001

It looks like it's in the defrag module, as a temporary fix (until Dragos, or
someone else can fix it in code) you might try disabling the defrag preprocessor
(the line that reads "preprocessor defrag") in your snort config file.


From: chrome <chrome at ...1118...> on 01/10/2001 02:51 PM

To:   snort-users at lists.sourceforge.net
Subject:  [Snort-users] problem with snort 1.7 on sparc solaris 2.6

Connected to a fairly heavily utilised FDDI ring it dumps core;

#0  0x2da58 in ReassembleIP (froot=0x80480) at spp_defrag.c:674
#1  0x2de08 in PreprocDefrag (p=0xeffff6d0) at spp_defrag.c:909
#2  0x244d4 in Preprocess (p=0xeffff6d0) at rules.c:3016
#3  0x1a0dc in ProcessPacket (user=0x0, pkthdr=0x71000, pkt=0x792b7 "P\b")
at snort.c:463
#4  0x3e5fc in pcap_read ()
#5  0x3f1f0 in pcap_loop ()
#6  0x1b1a0 in InterfaceThread (arg=0x71390) at snort.c:1278
#7  0x19f94 in main (argc=0, argv=0xeffffd94) at snort.c:397

Not being a GDB whizz I can't figure out what is wrong from this backtrace

Anyone able to point me to a solution?



Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:

More information about the Snort-users mailing list