snort 1.8.1 build 56 segmentation fault / Solaris 2.7

[wolfgang.schlueschen () philips com]

Dear All,
using snort 1.8.1
Version:            Version 1.8.1-beta5 (Build 56)
compiled with:           gcc 2.95.3
                    make "CFLAGS=-ggdb"
on:                 SunOS 5.7 Generic_106541-11 sun4u sparc SUNW,Ultra-5_10
started with:       /space/root/tools/snort/snort-1.8.1-beta5/snort -A fast -c 
/space/root/tools/snort/snort-1.8.1-beta5/snort.conf -s -h 130.143.56.0/24 -g nobody -u nobody -i hme0 -q -N

I get Segmentation fault after a few minutes. No core file was created.
Using make "CFLAGS=-ggdb -DDEBUG" snort runs more than 12 hours ( then aborted manually )
Snort 1.7 runs, too.



Output from gdb:
gdb /space/root/tools/snort/snort-1.8.1-beta5/snort
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "sparc-sun-solaris2.7"...
(gdb) run -A fast -c /space/root/tools/snort/snort-1.8.1-beta5/snort.conf -s -h 130.143.56.0/24 -g nobody -u nobody -i 
hme0 -q -N
Starting program: /space/root/tools/snort/snort-1.8.1-beta5/snort -A fast -c 
/space/root/tools/snort/snort-1.8.1-beta5/snort.conf -s -h 130.143.56.0/24 -g nobody -u nobody -i hme0 -q -N
WARNING: command line overrides rules file alert plugin!

Program received signal SIGSEGV, Segmentation fault.
0x0 in ?? ()
(gdb) where
#0  0x0 in ?? ()
#1  0x721fc in TreeFind (findme=0xcc60c8, p=0x176c8, parentp=0xffbef2d8, gender=0xffbef2d7 "\002", CmpFunc=0)
    at ubi_BinTree.c:275
#2  0x72884 in ubi_btInsert (RootPtr=0xae8340, NewNode=0xcc60c8, ItemPtr=0xcc60c8, OldNode=0xffbef354) at 
ubi_BinTree.c:632
#3  0x735b8 in ubi_sptInsert (RootPtr=0xae8340, NewNode=0xcc60c8, ItemPtr=0xcc60c8, OldNode=0xffbef354)
    at ubi_SplayTree.c:317
#4  0x7c3bc in InsertFrag (p=0xffbef530, ft=0xaff9c8) at spp_frag2.c:534
#5  0x7bf90 in Frag2Defrag (p=0xffbef530) at spp_frag2.c:430
#6  0x32c28 in Preprocess (p=0xffbef530) at rules.c:3427
#7  0x1c844 in ProcessPacket (user=0x0, pkthdr=0xffbefa20, pkt=0x1032a2 "") at snort.c:512
#8  0x7d9ac in pcap_read ()
#9  0x7e610 in pcap_loop ()
#10 0x1ec08 in InterfaceThread (arg=0x0) at snort.c:1441
#11 0x1c638 in main (argc=16, argv=0xffbefc34) at snort.c:445
(gdb) bt
#0  0x0 in ?? ()
#1  0x721fc in TreeFind (findme=0xcc60c8, p=0x176c8, parentp=0xffbef2d8, gender=0xffbef2d7 "\002", CmpFunc=0)
    at ubi_BinTree.c:275
#2  0x72884 in ubi_btInsert (RootPtr=0xae8340, NewNode=0xcc60c8, ItemPtr=0xcc60c8, OldNode=0xffbef354) at 
ubi_BinTree.c:632
#3  0x735b8 in ubi_sptInsert (RootPtr=0xae8340, NewNode=0xcc60c8, ItemPtr=0xcc60c8, OldNode=0xffbef354)
    at ubi_SplayTree.c:317
#4  0x7c3bc in InsertFrag (p=0xffbef530, ft=0xaff9c8) at spp_frag2.c:534
#5  0x7bf90 in Frag2Defrag (p=0xffbef530) at spp_frag2.c:430
#6  0x32c28 in Preprocess (p=0xffbef530) at rules.c:3427
#7  0x1c844 in ProcessPacket (user=0x0, pkthdr=0xffbefa20, pkt=0x1032a2 "") at snort.c:512
#8  0x7d9ac in pcap_read ()
#9  0x7e610 in pcap_loop ()
#10 0x1ec08 in InterfaceThread (arg=0x0) at snort.c:1441
#11 0x1c638 in main (argc=16, argv=0xffbefc34) at snort.c:445


Any help would be appreciated,
regards,
Wolfgang

--
Wolfgang Schlueschen   ---------------   mailto:Wolfgang.Schlueschen () philips com



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users