Re: Snort 3.1.18.0 on Ubuntu 18 & 20

I got past the previous error but now I’m stuck here.



Attached…



Thanks…



From: Vitalii Serhiiovych Horbatov -X (vhorbato - SOFTSERVE INC at Cisco)
<[email protected]>
Sent: Tuesday, March 21, 2023 6:19 AM
To: Michael Steele <[email protected]>
Cc: [email protected]
Subject: Re: [Snort-users] Snort 3.1.18.0 on Ubuntu 18 & 20



Hi Michael, could you please attach your config and full log message(using
systemctl -l status snort3 for example)?

Thanks,
Vitalii!



From: Snort-users <[email protected]
<mailto:[email protected]> > on behalf of Michael Steele
<[email protected] <mailto:[email protected]> >
Date: Monday, 20 March 2023, 15:15
To: [email protected] <mailto:[email protected]>
<[email protected] <mailto:[email protected]> >
Subject: [Snort-users] Snort 3.1.18.0 on Ubuntu 18 & 20





I’m getting to the section “Enable the Snort systemD service and start
it:” in the guide and the error below happens. Not sure what I did wrong
but the install has been good up to this poing.



morpheus@Morpheus:~/snort_src/pulledpork3$ sudo systemctl enable snort3

morpheus@Morpheus:~/snort_src/pulledpork3$ sudo service snort3 start

morpheus@Morpheus:~/snort_src/pulledpork3$ service snort3 status

● snort3.service - Snort3 NIDS Daemon

     Loaded: loaded (/lib/systemd/system/snort3.service; enabled; vendor
preset: enabled)

     Active: failed (Result: signal) since Sun 2023-03-19 18:53:56 EDT; 5s
ago

    Process: 1666 ExecStart=/usr/local/bin/snort -c
/usr/local/etc/snort/snort.lua -s 65535 -k none -l /var/log/snort ->

   Main PID: 1666 (code=killed, signal=ABRT)

        CPU: 8.642s



Mar 19 18:53:56 Morpheus snort[1666]:   #9 0x564aec1a5844 in
_ZN5ACRun7executeER8AnalyzerPPv+0x14 (/usr/local/bin/snort>

Mar 19 18:53:56 Morpheus snort[1666]:   #10 0x564aec1a4a25 in
_ZN8Analyzer14handle_commandEv+0xa5 (/usr/local/bin/snort>

Mar 19 18:53:56 Morpheus snort[1666]:   #11 0x564aec1a504d in
_ZN8Analyzer7analyzeEv+0x3d (/usr/local/bin/snort @0x564a>

Mar 19 18:53:56 Morpheus snort[1666]:   #12 0x564aec1a5215 in
_ZN8AnalyzerclEP7Swappert+0xb5 (/usr/local/bin/snort @0x5>

Mar 19 18:53:56 Morpheus snort[1666]:   #13 0x7f5ae8d76de4 in
_ZNKSt10error_code23default_error_conditionEv+0x34 (/lib/>

Mar 19 18:53:56 Morpheus snort[1666]:   #14 0x7f5ae9a3a609 in
start_thread+0xd9 (/lib/x86_64-linux-gnu/libpthread.so.0 >

Mar 19 18:53:56 Morpheus snort[1666]:   #15 0x7f5ae8a61133 in clone+0x43
(/lib/x86_64-linux-gnu/libc.so.6 @0x7f5ae89420>

Mar 19 18:53:56 Morpheus systemd[1]: snort3.service: Main process exited,
code=killed, status=6/ABRT

Mar 19 18:53:56 Morpheus systemd[1]: snort3.service: Failed with result
'signal'.

Mar 19 18:53:56 Morpheus systemd[1]: snort3.service: Consumed 8.642s CPU
time.



morpheus@Morpheus:



Thanks…

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

● snort3.service - Snort3 NIDS Daemon
     Loaded: loaded (/lib/systemd/system/snort3.service; enabled; vendor preset: enabled)
     Active: failed (Result: signal) since Tue 2023-03-21 11:02:37 EDT; 17min ago
    Process: 355 ExecStart=/usr/local/bin/snort -c /usr/local/etc/snort/snort.lua -s 65535 -k none -l /var/log/snort -D -u snort -g snort -i eth0 -m 0x1b --create-pidfile --plugin-path=/usr/local/etc/so_rules/ (code=killed, signal=SEGV)
   Main PID: 355 (code=killed, signal=SEGV)
        CPU: 16.248s

Mar 21 11:02:14 Morpheus systemd[1]: Started Snort3 NIDS Daemon.
Mar 21 11:02:14 Morpheus snort[355]:       (1733) => Re-defined address: '103.32.132.0/22'
Mar 21 11:02:14 Morpheus snort[355]:       (2436) => Re-defined address: '207.110.96.0/19'
Mar 21 11:02:37 Morpheus snort[355]: Snort (PID 355) caught fatal signal: SIGSEGV (11)
Mar 21 11:02:37 Morpheus snort[355]: Version: 3.1.57.0
Mar 21 11:02:37 Morpheus snort[355]: Backtrace:
Mar 21 11:02:37 Morpheus snort[355]:   #0 0x7f2dd1c27f3f in _ZL4evalPvR6CursorPN5snort6PacketE+0x9f
Mar 21 11:02:37 Morpheus systemd[1]: snort3.service: Main process exited, code=killed, status=11/SEGV
Mar 21 11:02:37 Morpheus systemd[1]: snort3.service: Failed with result 'signal'.
Mar 21 11:02:37 Morpheus systemd[1]: snort3.service: Consumed 16.248s CPU time