Re: Snort Stops Working after 1000 Alerts?

["Peter Schawacker" <schawacker () earthlink net>]

I'd put my money (and my beer) on disk space.  Could you send us a df -k?

Peter


----- Original Message -----
From: "Robinson, Eric R." <erobinson () dot state nv us>
To: <snort-users () lists sourceforge net>
Sent: Friday, March 22, 2002 3:53 PM
Subject: [Snort-users] Snort Stops Working after 1000 Alerts?


> On my installation, Snort appears to stop working after about 1000-2500
> alerts. The alerts.ids file stops changing, even though new files and
> folders keep apearing in the logs directory. I have to stop snort, delete
> alerts.ids, and then re-start snort. Then it works agin for a little
while.
> What's up with this?
>
> --Eric
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users