[Snort-devel] Snort 1.8.1-RELEASE silently exiting when stream4 enabled

Carl C. cc at ...609...
Fri Aug 17 17:54:02 EDT 2001


----- Original Message ----- 
> From: <andrew.s.pendray at ...611...>
> Date: Fri, 17 Aug 2001 16:37:46 -0400
> To: snort-devel at lists.sourceforge.net
> Subject: [Snort-devel] Snort 1.8.1-RELEASE silently exiting when stream4 enabled
> 
> Everyone,
> 
> I am running Snort 1.8.1-RELEASE (Build74) on a RedHat 7.1 system,
> 2.4.3-12smp kernel, libpcap 0.6.2.  When I enable the stream4
> pre-processor, Snort silently exits after ~ 15 minutes to several hours.  I
> 
> If I comment out these lines in snort.conf, it will run forever:
> 
>      #preprocessor stream4: detect_scans
>      #preprocessor stream4_reassemble
>
> Andrew Pendray

I posted something earlier dealing with my Alpha Linux box doing the same
thing. Mathieu Nantel wrote me to say that if you kill stream4 and use stream2,
you should be fine. I guess stream4 is still in beta overtime.

Carl
http://www.carlc.com/





More information about the Snort-devel mailing list