Snort mailing list archives
Re: Bug in mSearchREG() that can make Snort go into an infinite loop.
From: Martin Roesch <roesch () sourcefire com>
Date: Sun, 24 Feb 2002 21:58:06 -0500
It should probably be noted that the regex code is still non-functional (i.e. It doesn't work right) which is why it's not discussed in the docs/polite company. The fact that it could hang was nasty, but it's not even supposed to work yet, so I wouldn't put a whole lot of faith in it working even if it doesn't spin the computer off into navel-staring mode. -Marty On 2/24/02 12:08 PM, "Chris Green" <cmg () uab edu> wrote:
Andreas Östling <andreaso () it su se> writes:Hello, As described by a few others (for example http://sourceforge.net/tracker/index.php?func=detail&aid=494612&group_id=3357 &atid=103357) my Snort sometimes also stopped logging, and went up to near 100% CPU usage.Ahh Thanks for the patch. Applying it now.. Regex rules are still not something to write home about but this is a critical bug.
-- Martin Roesch - Founder/CEO Sourcefire Inc. - (410) 552-6999 Sourcefire: Professional Snort Sensor and Management Console appliances roesch () sourcefire com - http://www.sourcefire.com Snort: Open Source Network IDS - http://www.snort.org _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Bug in mSearchREG() that can make Snort go into an infinite loop. Andreas Östling (Feb 11)
- Re: Bug in mSearchREG() that can make Snort go into an infinite loop. Chris Green (Feb 24)
- Re: Bug in mSearchREG() that can make Snort go into an infinite loop. Martin Roesch (Feb 24)
- Re: Bug in mSearchREG() that can make Snort go into an infinite loop. Chris Green (Feb 24)