Project

General

Profile

Actions

Bug #12157

closed

Snort exits with Signal 10 on 32bit ARM platforms

Added by Steve Wheeler almost 3 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Snort
Target version:
-
Start date:
07/22/2021
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
21.05.1
Affected Version:
2.5.x
Affected Plus Version:
21.05
Affected Architecture:
SG-1000, SG-3100

Description

After enabling Snort it fails to start or crashes shortly after logging:

19 11:32:43 kernel pid 17377 (snort), jid 0, uid 0: exited on signal 10

This is a separate issue from PHP exiting with signal 11 which is covered by #11466 and for which a patch is available.

This is caused by compiler optimisations resulting in memory misalignment see:
https://forum.netgate.com/topic/161050/snort-won-t-start-after-upgrade-to-21-02-on-sg-3100

Actions #1

Updated by Jim Pingle over 2 years ago

  • Target version deleted (Future)
  • Affected Version deleted (2.5.x)
  • Affected Plus Version set to 21.05
Actions #2

Updated by Kris Phillips over 2 years ago

  • Status changed from New to Confirmed

I've confirmed this behavior on an SG-3100 on 21.05.1 once we fixed the Signal 11 issue in the above-linked redmine. This issue doesn't appear to be relevant to suricata.

Actions #3

Updated by Mateusz Guzik over 2 years ago

This should be fixed now as https://cgit.freebsd.org/ports/commit/?id=c2a4ab17ef5e44424f2b2e97e30a2fde437dcd8a hit upstream. I see it in local tree as 1af513f63319a2c61c5b83c70e27d1acbbdb5d41

Actions #4

Updated by Jim Pingle over 2 years ago

  • Status changed from Confirmed to Feedback
  • Assignee set to Mateusz Guzik
Actions #5

Updated by Steve Wheeler over 2 years ago

  • Status changed from Feedback to Resolved
  • Plus Target Version set to 21.09
  • Affected Version set to 2.5.x

This appears to be fixed. I've been running it for several days now and previously it would not run for longer than a few seconds.

Tested:

[21.09-DEVELOPMENT][root@3100.stevew.lan]/root: pkg info -x snort
pfSense-pkg-snort-4.1.4_2
snort-2.9.18_1

21.09-DEVELOPMENT (arm)
built on Wed Aug 18 01:11:54 EDT 2021
FreeBSD 12.2-STABLE
Actions #6

Updated by Renato Botelho over 2 years ago

  • Plus Target Version changed from 21.09 to 21.05.1

I've cherry-picked fixed snort to 21.05.1

Actions

Also available in: Atom PDF