RE: Segfault on Alpha 1.9.0

[Kunos Péter <Kunos.Peter () PSZAF hu>]

Seriously...  More info is needed:

        Version of Snort

1.9.0

        OS and Version

Linux, Debian 3.0, kernel 2.4.18 pcap 6.2
Machine: Alphaserver 1200, DEC Alpha ev56


        How do you start it?

snort -i <eth iface> -vde -l /<logfile path>

Yes, just for testing.

        How do you know it was Snort that caused it (snort) to exit?

How can i tell that it wasn't? :)
I started it in console mode (not daemon).

        What's the segfault msg?  ('gdb snort core' and then 'bt' would be
helpful--More info in the BUGS file in the tarball.)

"Segmentation fault" Nothing more. It runs for a few seconds. No core dump. 
But some "[!] WARNING: IP Len field is 6 bytes smaller than captured length." messages are on the console, i think this 
must be a clue.

Without logging (-l) snort runs fine. With binary (-b at the end) logging snort runs fine.


(And every version of snort produces "unaligned trap" kernel messages on this machine, but it's an other story)


And the most important:  Tip your bartender.  :-P

Always. I told him that Outlook is evil, but his english is worse than mine.


Peter Kunos


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users