[Oisf-devel] Crashing

[Victor Julien]

On 02/17/2011 06:09 PM, Chris Wakelin wrote:
>> [3351] 17/2/2011 -- 14:41:11 - (respond-reject-libnet11.c:88) <Error> (RejectSendLibnet11L3IPv4TCP) -- [ERRCODE: SC_ERR_LIBNET_INIT(142)] - libnet_inint failed: libnet_init(): UID or EUID of 0 required
> 
> I'm running as a non-privileged user, but not chrooted. (Still no core
> files though!). It looks like it might be trying to reject a connection
> as if it were in inline mode (which it's not!), and then not having the
> required privileges. Any idea what could cause that?

You can use "reject" rules in IDS mode as well, it will just try to send
a series of RST packets. Are you using "reject" sigs?

Cheers,
Victor

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------