Snort Forums Archive

Archive Home » BSD » Snort 2.7 - core dump

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Snort 2.7 - core dump

Posted by mcoy3 on July 25, 2007 02:29:37

Hi,
I have got problem with snort 2.7. System:FreeBSD 6.2 - stable i386. After upgreade from 2.6.1.4 to 2.7 when I'm trying start snort there is a error:Segmentation fault (core dumped), nothing else...
Snort was upgreaded by portupgrade.

Posted by mcoy3 on July 25, 2007 02:39:00

I found the problem - preprocessor stream5. I have got disabled Stream 4 and Flow. After disabled Stream5 and restore Flaow and Stream4 everything is ok. Any clue?

Posted by colingrady on July 25, 2007 04:29:40

This sounds like the same issue I found last week. Snort was likely compiled with GRE support.

GRE + Stream5 = segfault

Sourcefire acknowledged the issue and posted a patch to the Snort-Users mailing list. I recommend looking there. If you're not compiling Snort with GRE support, I'm sure Sourcefire would love to know why you're seeing a segfault.

Hope this helps,
Colin