segv in argus with latest pf_fring enabled lipcap

[Will Metcalf]

Everything is intel 32-bit.

On 7/7/08, Peter Van Epp <vanepp at sfu.ca> wrote:
> On Mon, Jul 07, 2008 at 12:09:54PM -0500, Will Metcalf wrote:
> > I will have to recompile to get you the unoptimized output. The
> > machine is CentOS5.2 with a pf_ring enabled kernel, and pf_ring
> > enabled libpcap. http://www.ntop.org/PF_RING.html  I should have
> > stated earlier that snort, daemonlogger ,and ntop all work ok compiled
> > against this lib :-(....
> >
> > (gdb) print ip
> > $1 = (struct ip *) 0x0
> > (gdb) print *ip
> > Cannot access memory at address 0x0
> > (gdb)
> >
>        32 or 64 bit? We had a fair amount of excitement with pf-ring (an older
> copy) on a 64 PPC machine. Default most stuff was 32 and objected to a 64
> pf-ring without recompile (although argus was happy as I recall, tcpdump
> for one wasn't til recompiled).
>
> Peter Van Epp / Operations and Technical Support
> Simon Fraser University, Burnaby, B.C. Canada
>