|
|
|
|
Snort Forums Archive
Archive Home » Snort Development » Snort with "-T" option coredumps in HPUX 11.11
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
Snort with "-T" option coredumps in HPUX 11.11
Posted by shaick on September 21, 2005 06:41:26
When Snort run as,
snort -c /opt/iexpress/snort/etc/snort.conf -T
--snip--
Log directory = /var/log/snort
Memory fault(coredump)
Core dump occurs in following line src/output-plugins/spo_log_tcpdump.c
310 data->dumpd = pcap_dump_open(pd,logdir);
We traced this above function implementation in libpcap source at savefile.c:1194
Program received signal SIGSEGV, Segmentation fault
si_code: 0 - SEGV_UNKNOWN - Unknown Error.
0x11c898 in pcap_dump_open (p=0x0, fname=0x7f7f0c60 "/var/log/snort/snort.log.1127302561") at savefile.c:1194
1194 linktype = dlt_to_linktype(p->linktype);
(gdb) p p->linktype
Error accessing memory address 0x10: Bad address.
Please provide fix for this issue. |
|
Posted by Joel_Esler on September 21, 2005 14:02:36
What version of Snort is this? Please email any info to snort-team [at] sourcefire [dot] com.
Joel Esler
SOURCEfire |
|
|
|
|
|
