[Snort-users] problem with snort 1.7 on sparc solaris 2.6

Bill Marquette wlmarque at ...8...
Wed Jan 10 16:15:12 EST 2001


It looks like it's in the defrag module, as a temporary fix (until Dragos, or
someone else can fix it in code) you might try disabling the defrag preprocessor
(the line that reads "preprocessor defrag") in your snort config file.

--Bill



From: chrome <chrome at ...1118...> on 01/10/2001 02:51 PM

To:   snort-users at lists.sourceforge.net
cc:
Client:
Subject:  [Snort-users] problem with snort 1.7 on sparc solaris 2.6



Connected to a fairly heavily utilised FDDI ring it dumps core;

#0  0x2da58 in ReassembleIP (froot=0x80480) at spp_defrag.c:674
#1  0x2de08 in PreprocDefrag (p=0xeffff6d0) at spp_defrag.c:909
#2  0x244d4 in Preprocess (p=0xeffff6d0) at rules.c:3016
#3  0x1a0dc in ProcessPacket (user=0x0, pkthdr=0x71000, pkt=0x792b7 "P\b")
at snort.c:463
#4  0x3e5fc in pcap_read ()
#5  0x3f1f0 in pcap_loop ()
#6  0x1b1a0 in InterfaceThread (arg=0x71390) at snort.c:1278
#7  0x19f94 in main (argc=0, argv=0xeffffd94) at snort.c:397

Not being a GDB whizz I can't figure out what is wrong from this backtrace
:)

Anyone able to point me to a solution?

Thanks,

Nathan.


_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/mailman/listinfo/snort-users










More information about the Snort-users mailing list