Re: Seg Fault

[spyguy703 <spyguy703 () yahoo com>]

I had same problem with RH 7.2 and built from source and things worked ok...


Slightly off topic ranting:

FWIW and IMHO, run your snort'er on a headless (no x-windows) FreeBSD box. 
FreeBSD supposedly has the fastest TCPIP stack and when you follow the 
"FreeBSD, MySQL, and Snort how to" guide, you can end up with a very plain os 
that end up being more secure. You still need a fw, but at least the OS is 
secure!


On Saturday 23 February 2002 04:22 pm, Demetri Mouratis wrote:
> I had a similar problem with 7.2 and snort.  I rebuilt snort from source
> and that cured the segfaults.  Maybe a bad rpm?
>
> On Sat, 23 Feb 2002, neptuna wrote:
> > Hello
> >
> > Running RH 7.2. when i start snort referenceing my snort.conf it
> > segfaults: Initializing rule chains...
> > No arguments to frag2 directive, setting defaults to:
> >     Fragment timeout: 60 seconds
> >     Fragment memory cap: 4194304 bytes
> > Stream4 config:
> >     Stateful inspection: ACTIVE
> >     Session statistics: INACTIVE
> >     Session timeout: 30 seconds
> >     Session memory cap: 8388608 bytes
> >     State alerts: INACTIVE
> >     Scan alerts: ACTIVE
> >     Log Flushed Streams: INACTIVE
> > Stream4_reassemble config:
> >     Server reassembly: ACTIVE
> >     Client reassembly: ACTIVE
> >     Reassembler alerts: ACTIVE
> >     Ports:
> > 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 ..
> > Using LOCAL time
> > Segmentation fault
> > ---
> >
> > any ideas ?
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.325 / Virus Database: 182 - Release Date: 2/19/2002
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> ---------------------------------------------------------------------
> Demetri Mouratis
> dmourati () linfactory com
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users