segv in argus with latest pf_fring enabled lipcap

[Peter Van Epp]

On Mon, Jul 07, 2008 at 12:09:54PM -0500, Will Metcalf wrote:
> I will have to recompile to get you the unoptimized output. The
> machine is CentOS5.2 with a pf_ring enabled kernel, and pf_ring
> enabled libpcap. http://www.ntop.org/PF_RING.html  I should have
> stated earlier that snort, daemonlogger ,and ntop all work ok compiled
> against this lib :-(....
> 
> (gdb) print ip
> $1 = (struct ip *) 0x0
> (gdb) print *ip
> Cannot access memory at address 0x0
> (gdb)
> 
	32 or 64 bit? We had a fair amount of excitement with pf-ring (an older
copy) on a 64 PPC machine. Default most stuff was 32 and objected to a 64
pf-ring without recompile (although argus was happy as I recall, tcpdump
for one wasn't til recompiled). 

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada