[Snort-users] flexresp2 is back and needs testing

Jeff Nathan jeff at ...950...
Wed Sep 8 22:02:14 EDT 2004


Erg..

Sorry about that.  Try the attached patch (version 1.0.2) instead, OK?

-Jeff
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sp_respond2.diff.gz
Type: application/x-gzip
Size: 16447 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040908/d801fc05/attachment.bin>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: sp_respond2.diff.gz.asc
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040908/d801fc05/attachment.asc>
-------------- next part --------------

On Sep 8, 2004, at 8:58 PM, Pedro Fortuna wrote:

> Jeff, I did, I used the sp_respond2.diff.gz you sent today directly to
> my (other) mail box (pfeito_at_netcabo.pt) and to other 6 or 7 guys.
>
> I'm going to repeat the process as I type this e-mail:
>
> Installation (you can see filesize and confirm that it is version 
> 1.0.1):
> -rw-r--r--  1 root root  16414 Sep  9 02:55 sp_respond2.diff.gz
>
> # gzip -d sp_respond2.diff.gz
>
> -rw-r--r--  1 root root  66323 Sep  9 02:55 sp_respond2.diff
>
> # patch ?p0 < sp_respond2.diff
> patching file configure.in
> patching file doc/Makefile.am
> patching file doc/README.FLEXRESP2
> patching file src/parser.c
> patching file src/plugbase.c
> patching file src/snort.h
> patching file src/detection-plugins/Makefile.am
> patching file src/detection-plugins/sp_react.c
> patching file src/detection-plugins/sp_react.h
> patching file src/detection-plugins/sp_respond.c
> patching file src/detection-plugins/sp_respond.h
> patching file src/detection-plugins/sp_respond2.c
> patching file src/detection-plugins/sp_respond2.h
>
> # aclocal
> # autoheader
> # automake
> # autoconf
>
> # ./configure --with-mysql=/usr/local/mysql --enable-flexresp2
> # make
> # make install
> # /etc/init.d/snort start
> # grep "sp_respond" /var/log/messages
> Sep  9 03:08:29 paco snort: FATAL ERROR: sp_respond2: Unable to
> allocate hash table memory.
>
> And Snort stops running.
> I didnt saw this problem on the previous version that you sent me 2 or
> 3 weeks ago.
>
> Any clues?
>
> Best Regards,
> Pedro Fortuna
>

--
The original EZ-bake packet oven.
http://nemesis.sourceforge.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040908/d801fc05/attachment.sig>


More information about the Snort-users mailing list