Re: Snort dies

["Peter Param" <pparam () stvincents com au>]

<1)  You're using an OS that does not handle files larger than 2GB.  On
some OS'es, you can simply tweak the kernel and then recompile it.  At
that point, all should be well.>

I've had a similar problem and I couldn't find any logging message for
clues until I started snort without any parameters in /etc/snort and
killed it after which I got...<file size exceeded.. stopping> or
something similar.  I archived the logs and restarted snort to fix this.
 Is there a parameter/code in snort that would delimit log file size?

cheers
Peter



**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been
virus scanned and although no viruses were detected by the system,
St Vincent's Hospital accepts no liability for any consequential
damage resulting from email containing any computer viruses.

**********************************************************************


-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users