Date: Mon, 20 Aug 2001 19:37:13 -0700 From: Kris Kennaway <kris@obsecurity.org> To: scheidell@fdma.com Cc: freebsd-ports@freebsd.org Subject: Re: anyone else have snort core dump? Message-ID: <20010820193712.A7801@xor.obsecurity.org> In-Reply-To: <200108201929.f7KJTMZ61556@caerulus.cerintha.com>; from freebsd-stable@news.fdma.com on Mon, Aug 20, 2001 at 03:29:22PM -0400 References: <200108201929.f7KJTMZ61556@caerulus.cerintha.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--BXVAT5kNtrzKuDFl Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 20, 2001 at 03:29:22PM -0400, freebsd-stable@news.fdma.com wrot= e: > I have a problem with snort 1.8.1-REL core dumping. >=20 > Tried two different systems >=20 > one, 133mhz PI, 4.3-REL, stock binaries, dec ethernet card >=20 > Two, 850mhz PIII, 4.4-RC2, (not stock) binaries, reltec card >=20 > yes, I make sure I took I686_cpu out of make.conf first. >=20 > and it core dumps when network is silent or noisy, doesn't matter (seems > to core dump mostly when silent) It's probably a code bug. Unfortunately recent releases of snort haven't exactly been very stable. I've learned to run it in a while(1) loop to restart it when it crashes. > So, do I need to run the linux binaries? and at what overhead? No, you should obtain a gdb core traceback and talk to the snort user support mailing list. It's probably already a known problem. Kris --BXVAT5kNtrzKuDFl Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7gclYWry0BWjoQKURAkWbAJsFqKLFYvEYsAsG9OId6In1NrRe1gCggQvv cpQpaK4wuqcms5BCOyNPS3g= =t5zl -----END PGP SIGNATURE----- --BXVAT5kNtrzKuDFl-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010820193712.A7801>