Re: segmentation fault in snort 3.0.0-a3 with hyperscan search engine

Russ <[email protected]>
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <[email protected]>
Can you send you conf and rules please?

On 2/15/16 5:03 AM, Ramya Potluri wrote:
> Hi
>
> I am trying to run snort3 with hyperscan as the search method by adding
> search_engine =
> {
>      search_method = 'hyperscan',
> }
> to the snort.lua, I tried remaining all methods like 
> ac_full,ac_bnfa,ac_banded,ac_sparse,ac_sparse_bands in this search 
> method, all these were fine but the hyperscan option was causing 
> segmentation fault. and my machine configurations are
> linux 3.10.0-123.el7.x86_64
> snort: snort 3.0.0-a3
> daq: daq-2.0.6
> hyperscan: hyperscan-4.0.1
> regel: ragel-6.9
> here I am adding the log that I got with hyperscan search method and 
> the gdb log
> can you please help me out
>
> regards,
> Ramya Potluri
>
>
> ------------------------------------------------------------------------------
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
> Monitor end-to-end web transactions and take corrective actions now
> Troubleshoot faster and improve end-user experience. Signup Now!
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>
>
> _______________________________________________
> Snort-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.