[Snort-users] Seg fault with latest pf_ring git

James Lay jlay at ...13475...
Tue Nov 1 14:03:38 EDT 2016


Topic says it.  Config test run:

sudo snort --daq-dir=/usr/local/lib/daq --daq pfring  -T -c 
/opt/snort/etc/snort.conf

backtrace:

#0  0x00007ffff6b681a8 in pfring_get_card_settings () from 
/opt/pfring/lib/libpcap.so.1
#1  0x00007fffb626cf47 in pfring_daq_initialize (config=<optimized out>, 
ctxt_ptr=0xf109d0 <daq_hand>, errbuf=0x7fffffffe3c0 "", len=256) at 
daq_pfring.c:491
#2  0x0000000000464050 in DAQ_Config (cfg=0x7fffffffe4f0) at sfdaq.c:515
#3  0x0000000000464183 in DAQ_New (sc=0x16879f0, intf=0x557e05 "") at 
sfdaq.c:553
#4  0x000000000043ba5d in SnortMain (argc=7, argv=0x7fffffffe678) at 
snort.c:875
#5  0x000000000043b9b3 in main (argc=7, argv=0x7fffffffe678) at 
snort.c:836

sudo snort --daq-dir=/usr/local/lib/daq --daq-list
Available DAQ modules:
pfring(v1): live inline multi unpriv
pcap(v3): readback live multi unpriv
ipfw(v3): live inline multi unpriv
dump(v3): readback live inline multi unpriv
afpacket(v5): live inline multi unpriv

Not sure of my next step.

James




More information about the Snort-users mailing list