Home page logo
/

snort logo Snort mailing list archives

Re: Snort instance crashes
From: "J. L. Cabral" <jelocabral () gmail com>
Date: Thu, 30 Dec 2010 10:54:55 -0300

Hi, I have this:

Version 2.9.0 (Build 68)
   ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2010 Sourcefire, Inc., et al.
           Using libpcap version 1.1.1
           Using PCRE version: 7.6 2008-01-28

Thanks in advance.

On Thu, Dec 30, 2010 at 10:39 AM, rmkml <rmkml () yahoo fr> wrote:
Hi JL,
what exactly snort v2.9.0.x version please?
Regards
Rmkml


On Thu, 30 Dec 2010, J. L. Cabral wrote:

Dear, I have 2 Snort 2.9 instances running at the same time, one
sniffes on eth1 and the other on eth2.

They both run OK for a certain period of time, and after that the
always the first instance crashes and I've just the second instance
up.

What can be the cause of this crash and how can tell Snort to log this
error events in a log file, because under /var/log/snort there is not
a error log file ?????

Thanks a lot

JeLo


------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment,
and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]