Snort mailing list archives

Re: Snort is going down sometimes...


From: Ralf Hildebrandt <Ralf.Hildebrandt () innominate com>
Date: Mon, 23 Jul 2001 19:30:18 +0200

On Mon, Jul 23, 2001 at 06:48:40PM +0200, Marcin Zurakowski wrote:

OK, I can do it and it will work, but I think it's not a good solution.

Of course not. If all software was as "stable" as qmail or postfix, we
wouldn't need daemontools...

SNORT in production systems MUST be stable. I'm not saying it is not, but
I want to know why snort is dying on my system. I have snort on other 2
systems - RH6.2 and RH7.0 with simillar configuration and everything is
working fine.

How to enable debug mode in kernel to get know why kernel kills snort?

Excessive memory usage I guess..

-- 
ralf.hildebrandt () innominate com                            innominate AG
Technical Consultant                   Don't be afraid of what you see -
Diplom-Informatiker                     be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX                        fax: +49.(0)30.308806-77

Attachment: _bin
Description:


Current thread: