> Source: [sk137792](https://support.checkpoint.com/results/sk/sk137792)

# sk137792 - Running tcpdump with the '-p' flag causes a buffer overflow

| Property | Value |
|----------|-------|
| Solution ID | sk137792 |
| Date Created | 2018-10-09 |
| Last Modified | 2018-10-11 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- Running tcpdump with the '-p' flag causes a buffer overflow stack:  
`*** buffer overflow detected ***: tcpdump terminated`  
`
======= Backtrace: =========`  
`
/lib/libc.so.6(__chk_fail+0x41)[0xf7cd6371]`  
`
/lib/libc.so.6[0xf7cd5a6c]`  
`
tcpdump[0x80a1612]`  
`
tcpdump[0x80a249b]`  
`
tcpdump[0x809398c]`  
`
/lib/libc.so.6(__libc_start_main+0xdc)[0xf7c09dec]`  
`
tcpdump[0x804a171]`  
`
======= Memory map: ========`  
`
08048000-080f3000 r-xp 00000000 fd:03 5129250 /usr/sbin/tcpdump`  
`
080f3000-080fb000 rw-p 000ab000 fd:03 5129250 /usr/sbin/tcpdump`  
`
080fb000-081c2000 rw-p 080fb000 00:00 0`  
`
08ca8000-08cc9000 rw-p 08ca8000 00:00 0`  
`
f7bd8000-f7be3000 r-xp 00000000 fd:03 3541875 /lib/libgcc_s-4.1.2-20080825.so.1`  
`
f7be3000-f7be4000 rw-p 0000a000 fd:03 3541875 /lib/libgcc_s-4.1.2-20080825.so.1`  
`
f7be4000-f7bed000 r-xp 00000000 fd:03 3538982 /lib/libnss_files-2.5.so`  
`
f7bed000-f7bee000 r--p 00008000 fd:03 3538982 /lib/libnss_files-2.5.so`  
`
f7bee000-f7bef000 rw-p 00009000 fd:03 3538982 /lib/libnss_files-2.5.so`  
`
f7bef000-f7bf0000 rw-p f7bef000 00:00 0`  
`
f7bf0000-f7bf2000 r-xp 00000000 fd:03 3541271 /lib/libdl-2.5.so`  
`
f7bf2000-f7bf3000 r--p 00001000 fd:03 3541271 /lib/libdl-2.5.so`  
`
f7bf3000-f7bf4000 rw-p 00002000 fd:03 3541271 /lib/libdl-2.5.so`  
`
f7bf4000-f7d2e000 r-xp 00000000 fd:03`  
` *** buffer overflow detected ***: tcpdump terminated`  
`
======= Backtrace: =========`  
`
/lib/libc.so.6(__chk_fail+0x41)[0xf7cd6371]`  
`
/lib/libc.so.6[0xf7cd5a6c]`  
`
tcpdump[0x80a1612]`  
`
tcpdump[0x80a249b]`  
`
tcpdump[0x809398c]`  
`
/lib/libc.so.6(__libc_start_main+0xdc)[0xf7c09dec]`  
`
tcpdump[`

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content