Home page logo
/

snort logo Snort mailing list archives

Re: SNORT_PP_DEBUG not functioning
From: Russ Combs <rcombs () sourcefire com>
Date: Mon, 8 Apr 2013 15:57:53 -0400

On Mon, Apr 8, 2013 at 3:55 PM, Jeffrey Karrels
<jeff.karrels () invincea com> wrote:
System Architecture: x86_64
Operating System and version: Linux localhost.localdomain
3.8.2-206.fc18.x86_64 #1 SMP
Version of Snort: 2.9.4
What preprocessors you loaded: Default
What rules (if any) you were using: Default
What output plug-ins you loaded: Default
What command line switches you were using: -i eth1 -C -c
/etc/snort/snort.conf -l /var/log/snort
Any Snort error messages: N/A
Environmental Variables: SNORT_PP_DEBUG=0x0000000E00000000
Compile Flags: --enable-dbg --enable-dbg-msgs

The Preprocessor debug messages do not display even when the proper
configuration options and environmental flags are set. debug.c is shifting
the bits out of the variable erroneously as they are already in the upper 32
if they are copied from snort_debug.h. Perhaps the intended format is to
always use the lower 32 bits, but that is not clear from the snort_debug.h
file...

You should be using 0x0000000E.

--- debug.c 2013-04-08 15:37:28.325059557 -0400
+++ debug_org.c 2013-04-08 15:50:42.204691127 -0400
@@ -65,7 +65,7 @@
     if ( key )
         debug_level = strtoul(key, NULL, 0);

-    //debug_level <<= 32;
+    debug_level <<= 32;

     key = getenv(DEBUG_VARIABLE);



------------------------------------------------------------------------------
Minimize network downtime and maximize team effectiveness.
Reduce network management and security costs.Learn how to hire 
the most talented Cisco Certified professionals. Visit the 
Employer Resources Portal
http://www.cisco.com/web/learning/employer_resources/index.html
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]