Snort mailing list archives

1.8.3 segfaulting


From: Wolfgang Rohdewald <wr6 () uni de>
Date: Wed, 26 Dec 2001 00:24:55 +0100

This snort.conf line causes a coredump:

var DNS_SERVERS [62.104.191.241/32 62.104.196.134/32]

I fixed it by replacing the space by a comma. Yet I
don't think snort should coredump.

/etc/rc.d/init.d# snort -V

-*> Snort! <*-
Version 1.8.3 (Build 88)

ltrace /usr/bin/snort -dv -e -A full -i ippp0 -c /etc/snort/snort.conf

strcasecmp("portscan-ignorehosts", "portscan-ignorehosts") = 0
strlen(0x08081c06, 32, 0xbfffcd78, 0x08052dbe, 16384) = 1
strlen(0x080d97c8, 32, 0xbfffcd78, 0x08052dbe, 16384) = 18
malloc(124)                                       = 0x080d9828
malloc(19)                                        = 0x080d98a8
memcpy(0x080d98a8, "[62.104.191.241/32", 18)      = 0x080d98a8
calloc(12, 1)                                     = 0x080d98c0
strrchr("[62.104.191.241/32", ']')                = NULL
--- SIGSEGV (Segmentation fault) ---

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: