[Oisf-devel] Suricata 1.2.1 + OpenBSD 5.1 = segmentation fault
Henri Wahl
h.wahl at ifw-dresden.de
Mon May 7 10:32:26 UTC 2012
Hi,
just another thought: when starting Suricata some thousands of error
message are printed like those:
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support:
"/<\s*valitem[^>]*\s(value|name)\s*=\s*([\x22\x27])[^\x22\x27]{104}/i"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^\x2f/smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^NLST(?!\n)\s[^\n]{200}/smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^LIST(?!\n)\s[^\n]{120}/smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/^STOR[^\n]+\.asp\x3B\./smi"
[4045] 7/5/2012 -- 12:30:22 - (detect-pcre.c:949) <Warning>
(DetectPcreParse) -- [ERRCODE: SC_ERR_PCRE_STUDY(6)] - PCRE JIT compiler
does not support: "/USER\s*[^\x0d]+\x25\x27/smi"
Another indication for a PCRE problem?
Regards
--
Henri Wahl
IT Department
Leibniz-Institut für Festkörper- u.
Werkstoffforschung Dresden
tel. (03 51) 46 59 - 797
email: h.wahl at ifw-dresden.de
http://www.ifw-dresden.de
Nagios status monitor for your desktop:
http://nagstamon.ifw-dresden.de
IFW Dresden e.V., Helmholtzstraße 20, D-01069 Dresden
VR Dresden Nr. 1369
Vorstand: Prof. Dr. Ludwig Schultz, Dr. h.c. Dipl.-Finw. Rolf Pfrengle
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4719 bytes
Desc: S/MIME Kryptografische Unterschrift
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20120507/733d56bc/attachment.bin>
More information about the Oisf-devel
mailing list