[Snort-devel] snot-0.91a kill snort-1.8.2 on RH Linux 7.1

W.Zhou wzhou_713 at ...954...
Sun Nov 18 18:17:01 EST 2001


Platform    : PC 686
OS          : RH Linux 7.1 with a kernel of 2.4.4
Rules       : I enable frag2, stream4, http-decode etc, more detail can be seen in the attached file

I run snort-1.8.2 as follow:
    snort -D -d -z all -c /etc/snort/snort.conf

when I run snot-0.91a from another Linux as follow:
    ./snot -r snortrules.txt -s 10.10.2.11 -d 10.10.2.28

the CPU resource snort used skyracket, and after a minute or two, it die.

Who could tell what's the problem?
Thx!


-------------- next part --------------
A non-text attachment was scrubbed...
Name: snort.conf
Type: application/octet-stream
Size: 18490 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20011118/4d2725df/attachment.obj>


More information about the Snort-devel mailing list