Help(2)? Broken binary (-b) snort-logfile (bogus pcap header)

["Chr. v. Stuckrad" <stucki () math fu-berlin de>]

Hi!

Curiouser and couriouser...

Having the problem that every logfile I get is broken since saturday
I reinstalled libpcap-0.6.2 and tcpdump-362 and snort-(current cvs)
and found out with 'lsof' that snort did open the logfile more then
once in parallel (may be it writes to the wrong position?).

So I changed my rules to never use the same logfilename twice,
BUT NOW EVERY (of the three) LOGFILE(s) has the same problem:
- reading it with option '-dvr ...' a few packages ok,
then at the end
        'Snort received signal 3, exiting'

This is on a freshly installed SuSE 7.2, Kernel upgraded to 2.4.12.

I'm completely lost there...

Stucki

-- 
Christoph von Stuckrad       * *  | nickname  | <stucki () math fu-berlin de> \
Freie Universitaet Berlin    |/_* | 'stucki'  | Tel(days):+49 30 838-75 459 |
Fachbereich Mathematik, EDV  |\ * | if online | Tel(else):+49 30 77 39 6600 |
Arnimallee 2-6/14195 Berlin  * *  | on IRCnet | Fax(alle):+49 30 838-75454 /

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users