<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hello there , <br>I am having trouble running suricata with rules file, everytime i start suricata i get this msg :<br><br><br>root@test:~/suricata-current# suricata -c suricata.yaml -i eth1 -c /etc/snort/rules/x11.rules<br>Warning: Invalid global_log_level assigned by user. Falling back on the default_log_level "Info"<br>Warning: Invalid global_log_format supplied by user or format length exceeded limit of "128" characters. Falling back on default log_format "[%i] %t - (%f:%l) <%d> (%n) -- "<br>Warning: Output_interface not supplied by user. Falling back on default_output_interface "Console"<br>[26040] 11/1/2010 -- 08:39:17 - (suricata.c:425) <Info> (main) -- This is Suricata version 0.8.0<br>*** glibc detected *** suricata: free(): invalid pointer: 0xb7edc2a1 ***<br>======= Backtrace: =========<br>/lib/tls/i686/cmov/libc.so.6[0xb7e1aa85]<br>/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7e1e4f0]<br>suricata[0x80a725a]<br>suricata[0x80a741a]<br>suricata[0x804b2aa]<br>/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7dc5450]<br>suricata[0x804a961]<br>======= Memory map: ========<br>08048000-080ca000 r-xp 00000000 08:01 91327 /usr/local/bin/suricata<br>080ca000-080cb000 rw-p 00082000 08:01 91327 /usr/local/bin/suricata<br>080cb000-08119000 rw-p 080cb000 00:00 0 [heap]<br>b7c00000-b7c21000 rw-p b7c00000 00:00 0<br>b7c21000-b7d00000 ---p b7c21000 00:00 0<br>b7d87000-b7d91000 r-xp 00000000 08:01 1777680 /lib/libgcc_s.so.1<br>b7d91000-b7d92000 rw-p 0000a000 08:01 1777680 /lib/libgcc_s.so.1<br>b7d99000-b7d9a000 rw-p b7d99000 00:00 0<br>b7d9a000-b7dae000 r-xp 00000000 08:01 83916 /usr/lib/libz.so.1.2.3.3<br>b7dae000-b7daf000 rw-p 00013000 08:01 83916 /usr/lib/libz.so.1.2.3.3<br>b7daf000-b7ef8000 r-xp 00000000 08:01 1777688 /lib/tls/i686/cmov/libc-2.7.so<br>b7ef8000-b7ef9000 r--p 00149000 08:01 1777688 /lib/tls/i686/cmov/libc-2.7.so<br>b7ef9000-b7efb000 rw-p 0014a000 08:01 1777688 /lib/tls/i686/cmov/libc-2.7.so<br>b7efb000-b7efe000 rw-p b7efb000 00:00 0<br>b7efe000-b7f24000 r-xp 00000000 08:01 87668 /usr/lib/libpcre.so.3.12.1<br>b7f24000-b7f25000 rw-p 00026000 08:01 87668 /usr/lib/libpcre.so.3.12.1<br>b7f25000-b7f26000 rw-p b7f25000 00:00 0<br>b7f26000-b7f41000 r-xp 00000000 08:01 565249 /usr/local/lib/libyaml-0.so.2.0.1<br>b7f41000-b7f42000 rw-p 0001a000 08:01 565249 /usr/local/lib/libyaml-0.so.2.0.1<br>b7f42000-b7f56000 r-xp 00000000 08:01 1777702 /lib/tls/i686/cmov/libpthread-2.7.so<br>b7f56000-b7f58000 rw-p 00013000 08:01 1777702 /lib/tls/i686/cmov/libpthread-2.7.so<br>b7f58000-b7f5a000 rw-p b7f58000 00:00 0<br>b7f5a000-b7f60000 r-xp 00000000 08:01 88329 /usr/lib/libnfnetlink.so.0.2.0<br>b7f60000-b7f61000 rw-p 00005000 08:01 88329 /usr/lib/libnfnetlink.so.0.2.0<br>b7f61000-b7f63000 r-xp 00000000 08:01 88309 /usr/lib/libnetfilter_queue.so.1.1.0<br>b7f63000-b7f64000 rw-p 00001000 08:01 88309 /usr/lib/libnetfilter_queue.so.1.1.0<br>b7f64000-b7f77000 r-xp 00000000 08:01 89678 /usr/lib/libnet.so.1.3.0<br>b7f77000-b7f78000 rw-p 00013000 08:01 89678 /usr/lib/libnet.so.1.3.0<br>b7f78000-b7f7a000 rw-p b7f78000 00:00 0<br>b7f7a000-b7f97000 r-xp 00000000 08:01 87729 /usr/lib/libpcap.so.0.7.2<br>b7f97000-b7f98000 rw-p 0001d000 08:01 87729 /usr/lib/libpcap.so.0.7.2<br>b7f98000-b7fa6000 r-xp 00000000 08:01 88130 /usr/lib/libhtp-0.1.so.1.0.2<br>b7fa6000-b7fa7000 rw-p 0000e000 08:01 88130 /usr/lib/libhtp-0.1.so.1.0.2<br>b7fac000-b7fb0000 rw-p b7fac000 00:00 0<br>b7fb0000-b7fb1000 r-xp b7fb0000 00:00 0 [vdso]<br>b7fb1000-b7fcb000 r-xp 00000000 08:01 1779190 /lib/ld-2.7.so<br>b7fcb000-b7fcd000 rw-p 00019000 08:01 1779190 /lib/ld-2.7.so<br>bffc9000-bffde000 rw-p bffeb000 00:00 0 [stack]<br>Aborted<br><br>Running Ubuntu 8.04 server <br><br><br>I will be pleased for any help <br><br>thanks in advance <br>Ihab El Bakri <br> <br /><hr />Windows Live Hotmail: <a href='http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_4:092009' target='_new'>Your friends can get your Facebook updates, right from HotmailŪ.</a></body>
</html>