[Snort-users] Re: snort startup problem

Fyodor fygrave at ...121...
Wed Mar 14 13:09:57 EST 2001


On Tue, Mar 13, 2001 at 09:06:22PM -0500, Brian Caswell wrote:
> Fyodor wrote:
> > On Sun, Mar 11, 2001 at 09:49:40PM -0500, Martin Roesch wrote:
> > > Looks like Apple has screwed something up, but try checking out the
> > > latest daily tarball to see if it's fixed in the latest build (build
> > > 3).  Here's the URL, try it out:
> > >
> > > http://snort.sourceforge.net/snort-daily.tar.gz
> > >
> > > Let me know how it goes!
> > 
> > Daily snapshot should work there, cuz I changed behaviour of this piece...
> 
> I just pulled from CVS (to merge my changes for CSV) and it cores hard
> on any alert.  I tried using gdb to attempt to figure out what was
> wrong, but got nowhere quick.  -DDEBUG doesn't give much more
> information either.  My rules and PCAP file are very simple, nothing
> complex.  And the same rules/pcap worked before the changes that
> happened today.  
> 
> If anyone wants the PCAP, config, or core just ask.  This was built on
> i386-OpenBSD-2.8 

Oii.. fixed. :) Was a slight glitch in one of previous days commits of the
logging routines actually. Should be fine now. Stack was trashed badly because one
byte of frame pointer was zeroed, that's why gdb core analysis was useless
here.






More information about the Snort-users mailing list