On Wed, 29 Oct 2003 11:59:25 -0500 Ben Collins <[EMAIL PROTECTED]> wrote:
> What flags are you passing? I willing to bet snort just isn't casting > where it needs to be, or is casting improperly. > > I also hope it isn't building with anything lik -mcpu=v9 on sparc-linux. No, see my other posting. It has a pointer to a struct IPHdr, which is not 4 byte aligned, and it's trying to dereference the IP addresses in the header which causes the unaligned traps. SNORT looks pretty broken on any RISC platform in general for this reason.