<div dir="ltr"><div>Hi,</div>
<div> </div>
<div>i am using the current version of bro-ids 1.3.2, i am getting segmentation fault error while running on a pcap file. I saw that frag.cc has to be modified previously </div>
<div> </div>
<div><em>@@ -161,10 +161,11 @@<br>if ( b->next )<br>{<br>// We have a hole.<br>- </em><em><strong>if ( b->seq >= frag_size )<br></strong>+ if ( b->upper >= frag_size )<br>{<br>IP_Hdr proto_h((const struct ip*) proto_hdr);<br>
s->Weird("fragment_size_inconsistency", &proto_h);<br>+ frag_size = b->upper;<br>}<br>else<br>return;<br>@@ -174,6 +175,7 @@<br>{<br>IP_Hdr proto_h((const struct ip*) proto_hdr);<br>s->Weird("fragment_size_inconsistency", &proto_h);<br>
+ frag_size = last_block->upper;<br>}<br><br>else if ( last_block->upper < frag_size )<br></em></div>
<div>i found the only one change to be modified in Frag.cc (bolded one), do I need to remove few lines after return in the file. Only adding the bolded line and again make and make install.... still it is giving me segmentation fault... i am having older version of bro in the same system... does it affect in any way.....</div>
<div> </div>
<div>thanks.</div>
<div> </div></div>