[Snort-users] Cannot get Snort to generate a core file at segfault

From: Andy Berryman <aberryman_at_nospam>
Date: Thu Feb 04 2010 - 14:54:23 GMT
To: "snort-users@lists.sourceforge.net" <snort-users@lists.sourceforge.net>

I have a box that is segfaulting multiple times a day. I can't get it to generate a core file when it does though.

It's running 2.8.5.2 and kernel is Linux version 2.6.29.6-20100112 (dave@iapetus) (gcc version 4.2.4 (Ubuntu 4.2.4-1ubuntu4)) #20 SMP Tue Jan 12 10:22:28 CST 2010 2GB Ram and a Intel Core 2 CPU

I've tried the command "ulimit -c 1000000" and then "ulimit -c unlimited" and neither has worked.

This is the error I'm getting in syslog when it happens. (none) kernel: snort24318<https://forums.snort.org/forums/snort-advanced/topics/can-t-get-snort-to-create-a-core-file-when-it-segfault#fn24318>: segfault at a ip 08079700 sp bfd7c128 error 4 in snort[8048000+a1000] (none) kernel: device eth1 left promiscuous mode

I do a search of my file systems with "find / -name '*core*' and nothing comes back resembling a core dump.

Any ideas of what I'm doing wrong?

Thanks,
Andy Berryman

The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

This message: [ Message body ]
Next message: Joel Esler: "Re: [Snort-users] Signature question"
Previous message: spiffy pickle: "[Snort-users] Signature question"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]