Re: Crash while running snort-3.0.0-a1 with netmap

[Y M <snort () outlook com>]

Comments below.
Date: Mon, 15 Dec 2014 11:33:56 -0500
From: mialtize () cisco com
To: snort-devel () lists sourceforge net
Subject: Re: [Snort-devel] Crash while running snort-3.0.0-a1 with netmap


  
    
  
  
    Do you run into the same crash on that
      system/configuration with Snort 2.9.x + netmap?
-- I haven't experienced any crashes running Snort 2.9.7 + netmap. So far Snort appears to be running smoothly on the 
same environment, with minor configuration changes; enabling appid and file_inspect preprocessors in the 2.9.7 setup.

      

      On 12/13/2014 04:13 AM, Y M wrote:

    
    
      
      
      Hello,
        

        
        While running snort with netmap support, snort crashes and
          process hangs with a kill -9 to stop process:
        

        
        sudo /usr/local/snort/bin/snort -c
            /usr/local/snort/etc/snort.lua -i eth0 --daq netmap
            --daq-dir=/usr/local/lib/daq --shell
        

        
        crash log:
        

        
        
          ProblemType:
              KernelOops
          Annotation:
              Your system might become unstable now and might need to be
              restarted.
          Date: Fri
              Dec 12 20:12:01 2014
          Failure:
              oops
          OopsText:
           BUG:
              unable to handle kernel NULL pointer dereference at      
                  (null)
           IP: [<
                       (null)>]           (null)
           PGD
              3d1c9067 PUD 81d7f067 PMD 0 
           Oops: 0010
              [#1] SMP 
           Modules
              linked in: pf_ring(OX) netmap(OX) vmw_vsock_vmci_transport
              vsock snd_ens1371 snd_ac97_codec bnep rfcomm ac97_bus
              gameport bluetooth snd_pcm snd_page_alloc snd_seq_midi
              coretemp crct10dif_pclmul snd_seq_midi_event crc32_pclmul
              ghash_clmulni_intel snd_rawmidi snd_seq aesni_intel
              hid_generic aes_x86_64 lrw gf128mul glue_helper
              vmw_balloon snd_seq_device ablk_helper snd_timer cryptd
              serio_raw usbhid snd hid vmwgfx soundcore ttm drm vmw_vmci
              i2c_piix4 shpchp mac_hid parport_pc ppdev lp parport
              psmouse mptspi mptscsih ahci e1000 mptbase libahci
              vmw_pvscsi floppy vmxnet3 [last unloaded: netmap]
           CPU: 1
              PID: 86519 Comm: snort Tainted: G           OX
              3.13.0-43-generic #72-Ubuntu
        
        ......
        

        
        Thanks.
        Yaser
      
      

      
      

      ------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
      

      
      

      _______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
    
    

  


------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!