I had same problem with RH 7.2 and built from source and things worked ok...

Slightly off topic ranting:

FWIW and IMHO, run your snort'er on a headless (no x-windows) FreeBSD box.
FreeBSD supposedly has the fastest TCPIP stack and when you follow the
"FreeBSD, MySQL, and Snort how to" guide, you can end up with a very plain os
that end up being more secure. You still need a fw, but at least the OS is
secure!

On Saturday 23 February 2002 04:22 pm, Demetri Mouratis wrote:
> I had a similar problem with 7.2 and snort. I rebuilt snort from source
> and that cured the segfaults. Maybe a bad rpm?
>
> On Sat, 23 Feb 2002, neptuna wrote:
> > Hello
> >
> > Running RH 7.2. when i start snort referenceing my snort.conf it
> > segfaults: Initializing rule chains...
> > No arguments to frag2 directive, setting defaults to:
> > Fragment timeout: 60 seconds
> > Fragment memory cap: 4194304 bytes
> > Stream4 config:
> > Stateful inspection: ACTIVE
> > Session statistics: INACTIVE
> > Session timeout: 30 seconds
> > Session memory cap: 8388608 bytes
> > State alerts: INACTIVE
> > Scan alerts: ACTIVE
> > Log Flushed Streams: INACTIVE
> > Stream4_reassemble config:
> > Server reassembly: ACTIVE
> > Client reassembly: ACTIVE
> > Reassembler alerts: ACTIVE
> > Ports:
> > 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 ..
> > Using LOCAL time
> > Segmentation fault
> > ---
> >
> > any ideas ?
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.325 / Virus Database: 182 - Release Date: 2/19/2002
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-userslists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> ---------------------------------------------------------------------
> Demetri Mouratis
> dmouratilinfactory.com
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-userslists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_________________________________________________________
Do You Yahoo!?
Get your free yahoo.com address at http://mail.yahoo.com

_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]