OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Snort-users] [Spam] Re: segfault - how to troubleshoot

From: Lay, James (james.laywincofoods.com)
Date: Wed Feb 01 2012 - 09:42:37 CST


> -----Original Message-----
> From: Doug Burks [mailto:doug.burksgmail.com]
> Sent: Tuesday, January 31, 2012 11:54 AM
> To: Russ Combs
> Cc: snort-userslists.sourceforge.net
> Subject: [Spam] Re: [Snort-users] segfault - how to troubleshoot
> Importance: Low
>
> It happened at 7:01, which is the time of our daily cronjob in
> Security Onion to run PulledPork and restart Snort. I'll look into
> it.
>
> Thanks,
> Doug

If you've got dev tools you can use gdb...

gdb snort
handle SIGPIPE nostop noprint
run (put options here like -c bleh.conf)

after it crashes:
bt full

send that info.

James

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!