On Sat, Feb 10, 2001 at 07:14:36PM -0300, Javier Kohen wrote:
> I was about to try Snort out, but my test was spoilt by a Core dump.

Was libpcap configured to support IPv6?

Is there an IPv6 host entry for "localhost"?

What happens if you do

        tcpdump -i lo host localhost

with a version of tcpdump linked with the same libpcap library?  Does it
crash?

If so, what happens if you do

        tcpdump -d -O -i lo host localhost

I think I've seen reports of crashes in "find_levels_r()" with a null
argument before, and somebody just posted another one - but it doesn't
happen on my non-IPv6-enabled system, so perhaps this only happens if
"host" is checking both the IPv4 and IPv6 address.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to