[Oisf-devel] Packet Array in 1.0.x

Will Metcalf william.metcalf at gmail.com
Thu Aug 19 23:36:29 UTC 2010


Can you give us the output of a backtrace Joel?  You can send off-list
if you so desire.

Regards,

Will

On Thu, Aug 19, 2010 at 5:19 PM, Joel Ebrahimi <jebrahimi at bivio.net> wrote:
> I'm seeing multiple problems with the array that was added to
> PcapThreadVars_.
>
> I either exhaust memory completely or segfault. I think they both stem
> from the same issue with is that the array seems to keep filling and
> eventually there is an access outside of PCAP_FILE_MAX_PKTS (256) which
> causes the segfaults.
>
> Is the array supposed to hold a finite number of past packets ie. 256 or
> whatever PCAP_FILE_MAX_PKTS is set to? If so then I suppose a modulus
> operator or some kind of reset is needed.
>
> // Joel
>
>
>
> Joel Ebrahimi
> Solutions Architect
> Bivio Networks
> jebrahimi at bivio.net
>
> _______________________________________________
> Oisf-devel mailing list
> Oisf-devel at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-devel
>



More information about the Oisf-devel mailing list