[Snort-users] Snort 2.8.6 segfaults when starting

Joel Esler jesler at ...1935...
Wed Apr 28 13:30:18 EDT 2010


I like that idea. ;)

--
Joel Esler
Sent from my iPhone

On Apr 28, 2010, at 1:10 PM, Seth Art <sethsec at ...11827...> wrote:

> Does Joel get a free beer every time he answers someones question
> correctly?   The man is a on a roll...
>
> On Wed, Apr 28, 2010 at 12:12 PM, Andy Berryman  
> <aberryman at ...14758...> wrote:
>> That was it. Thanks for the quick response!
>>
>>
>>
>>
>>
>> Andy
>>
>>
>>
>> From: Joel Esler [mailto:jesler at ...1935...]
>> Sent: Wednesday, April 28, 2010 11:03 AM
>> To: Andy Berryman
>> Cc: snort-users at lists.sourceforge.net
>> Subject: Re: [Snort-users] Snort 2.8.6 segfaults when starting
>>
>>
>>
>> Looks like you might be using 2.8.5 SO rules with a 2.8.6 engine.
>>
>>
>>
>> J
>>
>> On Wed, Apr 28, 2010 at 11:59 AM, Andy Berryman  
>> <aberryman at ...14758...>
>> wrote:
>>
>> I'm trying to update to 2.8.6 from 2.8.5.2 and when I start snort,  
>> I get
>> this error.
>>
>>
>>
>> Apr 28 15:50:55 (none) kernel: snort[11150]: segfault at 0 ip  
>> b7955947 sp
>> bfa35d70 error 4 in libsf_engine.so.0.0.0[b7953000+8000]
>>
>>
>>
>>
>>
>> I don't get a core file either. Any ideas? Is it a problem with the  
>> way it
>> was compiled?
>>
>>
>>
>>
>>
>> Thanks,
>>
>> Andy Berryman
>>
>>
>>
>>
>>
>> ________________________________
>>
>> This message from Cymtec Systems, Inc. contains confidential  
>> information and
>> is solely for the use of the recipient(s) named above. If you are  
>> not the
>> intended recipient or an agent responsible for delivering it to the  
>> intended
>> recipient, you are hereby notified that you have received this  
>> message in
>> error and that any review, disclosure, copying, distribution or use  
>> of the
>> contents of this message is strictly prohibited. If you have  
>> received this
>> message in error, please destroy it immediately and notify Cymtec  
>> Systems,
>> Inc. by telephone at +1.314.993.8700 or by return e-mail.
>>
>> ________________________________
>>
>>
>>
>> --- 
>> --- 
>> --- 
>> ---------------------------------------------------------------------
>>
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
>>
>>
>> ________________________________
>> This message from Cymtec Systems, Inc. contains confidential  
>> information and
>> is solely for the use of the recipient(s) named above. If you are  
>> not the
>> intended recipient or an agent responsible for delivering it to the  
>> intended
>> recipient, you are hereby notified that you have received this  
>> message in
>> error and that any review, disclosure, copying, distribution or use  
>> of the
>> contents of this message is strictly prohibited. If you have  
>> received this
>> message in error, please destroy it immediately and notify Cymtec  
>> Systems,
>> Inc. by telephone at +1.314.993.8700 or by return e-mail.
>> ________________________________
>>
>> --- 
>> --- 
>> --- 
>> ---------------------------------------------------------------------
>>
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>




More information about the Snort-users mailing list