Your message dated Wed, 9 Aug 2006 00:53:03 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Closing ancient (tagged woody) bugs
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Subject: snort sparc: Bus error
Package: snort
Version: 1.7-7
Severity: 1
-- System Information
Debian Release: 2.2
Kernel Version: Linux kara 2.2.17 #1 Tue Jul 4 13:15:34 EDT 2000 sparc unknown
Versions of the packages snort depends on:
ii adduser 3.11.1 Add users and groups to the system.
ii debconf 0.2.80.17 Debian configuration management system
ii libc6 2.2.3-5 GNU C Library: Shared libraries and Timezone
ii libmysqlclient 3.23.36-2 mysql database client library
ii libpcap0 0.6.2-1 System interface for user-level packet captu
ii sysklogd 1.3-33.1 Kernel and system logging daemons
/sbin/st-b \var/log/snort \.conf \" \ME_NET" \ $DAEMON -- \
syslog-ng Not installed or no info
--- Begin /etc/snort/snort.conf (modified conffile)
var HOME_NET 195.247.160.0/20
var EXTERNAL_NET any
var DNS_SERVERS [195.247.160.16/32,195.247.164.16/32]
preprocessor defrag
preprocessor http_decode: 80 8080
preprocessor portscan: $HOME_NET 4 3 portscan.log
output alert_syslog: LOG_AUTH LOG_ALERT
output log_tcpdump: snort.log
include local-first
include webcgi-lib
include webcf-lib
include webiis-lib
include webfp-lib
include webmisc-lib
include overflow-lib
include finger-lib
include ftp-lib
include smtp-lib
include telnet-lib
include misc-lib
include netbios-lib
include scan-lib
include ddos-lib
include rpc-lib
include local-last
--- End /etc/snort/snort.conf
--- Begin /etc/snort/snort.debian.conf (modified conffile)
DEBIAN_SNORT_STARTUP=boot
DEBIAN_SNORT_HOME_NET="195.247.160.0/20"
DEBIAN_SNORT_OPTIONS=" -i eth0"
DEBIAN_SNORT_STATS_RCPT="root"
DEBIAN_SNORT_STATS_TRESHOLD="3"
--- End /etc/snort/snort.debian.conf
--- Begin /etc/init.d/snort (modified conffile)
#!/bin/sh -e
test $DEBIAN_SCRIPT_DEBUG && set -v -x
test -f /usr/sbin/snort || exit 0
DAEMON=/usr/sbin/snort
CONFIG=/etc/snort/snort.debian.conf
test -f $CONFIG && . $CONFIG
test -z "$DEBIAN_SNORT_HOME_NET" && DEBIAN_SNORT_HOME_NET="192.168.0.0/20"
cd /etc/snort
case "$1" in
start)
--- End /etc/init.d/snort (modified conffile)
--- Begin gdb /usr/sbin/snort
GNU gdb 19990928
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "sparc-unknown-linux-gnu"...
(no debugging symbols found)...
(gdb) run -S "HOME_NET=195.247.160.0/20" -h "195.247.160.0/20" -c
/etc/snort/snort.conf -l /var/log/snort -b -d -u snort -g snort -s
Starting program: /usr/sbin/snort -S "HOME_NET=195.247.160.0/20" -h
"195.247.160.0/20" -c /etc/snort/snort.conf -l /var/log/snort -b -d -u snort -g
snort -s
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
--== Initializing Snort ==--
Initializing Network Interface eth0
Decoding Ethernet on interface eth0
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
WARNING: command line overrides rules file alert plugin!
WARNING: command line overrides rules file logging plugin!
586 Snort rules read...
586 Option Chains linked into 103 Chain Headers
0 Dynamic rules
+++++++++++++++++++++++++++++++++++++++++++++++++++
Rule application order: ->activation->dynamic->alert->log->pass
--== Initialization Complete ==--
-*> Snort! <*-
Version 1.7
By Martin Roesch ([EMAIL PROTECTED], www.snort.org)
(no debugging symbols found)...
Program received signal SIGBUS, Bus error.
0x19280 in _init ()
(gdb) where
#0 0x19280 in _init ()
#1 0x18d3c in _init ()
#2 0x129e8 in _init ()
#3 0x5002d800 in pcap_read () from /usr/lib/libpcap.so.0
#4 0x5002d5a4 in pcap_read () from /usr/lib/libpcap.so.0
#5 0x5002e82c in pcap_loop () from /usr/lib/libpcap.so.0
#6 0x13b40 in _init ()
#7 0x129c0 in _init ()
#8 0x5017a3c8 in __libc_start_main () from /lib/libc.so.6
--- End gdb /usr/sbin/snort
--- Begin last 20 line from strace /usr/sbin/snort -S
"HOME_NET=195.247.160.0/20" -h "195.247.160.0/20" -c /etc/snort/snort.conf -l
/var/log/snort -b -d -u snort -g snort -s -v
open("/var/log/snort/[EMAIL PROTECTED]", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 6
fstat(6, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x5001f000
setgid(101) = 0
getuid() = 0
open("/etc/group", O_RDONLY) = 7
fcntl(7, F_GETFD) = 0
fcntl(7, F_SETFD, FD_CLOEXEC) = 0
fstat(7, {st_mode=S_IFREG|0644, st_size=576, ...}) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x50023000
_llseek(0x7, 0, 0, 0xefffe290, 0x1) = 0
read(7, "root:x:0:\ndaemon:x:1:\nbin:x:2:\ns"..., 4096) = 576
read(7, "", 4096) = 0
close(7) = 0
munmap(0x50023000, 8192) = 0
setgroups(1, [101]) = 0
setuid(101) = 0
recvfrom(3, "\0\0\fJ\234B\0\300\5\4\30c\10\0E\0\0([EMAIL PROTECTED]"..., 1514,
MSG_TRUNC, {sin_family=AF_PACKET, proto=0x800, if2, pkttype=3, addr(6)={1, },
[20]) = 60
ioctl(3, SIOCGSTAMP, 0xefffe9d0) = 0
--- SIGBUS (Bus error) ---
+++ killed by SIGBUS +++
--- End last 20 line from strace
Hope, that this all help.
Best regards
Klaus Groeger
---
Klaus Groeger Abacom Internet GmbH
[EMAIL PROTECTED] Konrad-Zuse-Str. 1
fon: +49 5271 967 0 37671 Hoexter
--- End Message ---
--- Begin Message ---
Hi,
This bug has been open for quite a long time and it is tagged 'woody'. As the
latest Debian release 3.1 'sarge' has been available since last year and this
bugs do not seem to be present there I'm closing this bug.
Please reopen the bug if you have evidence that this bug is still present in
newer versions of the package. Any additional information would also be
really useful.
Thanks
Javier
signature.asc
Description: Digital signature
--- End Message ---
