[Oisf-devel] Suricata 1.2.1 + OpenBSD 5.1 = segmentation fault

Henri Wahl h.wahl at ifw-dresden.de
Mon May 7 10:32:26 UTC 2012


Hi,
just another thought: when starting Suricata some thousands of error
message are printed like those:

[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support:
"/<\s*valitem[^>]*\s(value|name)\s*=\s*([\x22\x27])[^\x22\x27]{104}/i"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^\x2f/smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^NLST(?!\n)\s[^\n]{200}/smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^LIST(?!\n)\s[^\n]{120}/smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^STOR[^\n]+\.asp\x3B\./smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/USER\s*[^\x0d]+\x25\x27/smi"

Another indication for a PCRE problem?

Regards

--

Henri Wahl

IT Department
Leibniz-Institut für Festkörper- u.
Werkstoffforschung Dresden

tel. (03 51) 46 59 - 797
email: h.wahl at ifw-dresden.de
http://www.ifw-dresden.de

Nagios status monitor for your desktop:
http://nagstamon.ifw-dresden.de

IFW Dresden e.V., Helmholtzstraße 20, D-01069 Dresden
VR Dresden Nr. 1369
Vorstand: Prof. Dr. Ludwig Schultz, Dr. h.c. Dipl.-Finw. Rolf Pfrengle

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4719 bytes
Desc: S/MIME Kryptografische Unterschrift
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20120507/733d56bc/attachment.bin>


More information about the Oisf-devel mailing list