[Snort-devel] Re: Snort 2.0 on OpenBSD 3.3 Errors Out Post-Init(bug?)
cmg at ...402...
Wed Apr 23 08:15:11 EDT 2003
"James Webb" <jtwebb at ...1932...> writes:
> Dan + Chris,
> Thank you both for the info. The culprit was ulimit. Default values
> in OBSD 3.3
> evidently are not adequate for running Snort v2.0 on my box (933 PIII -
> 256MB Physical RAM with default rule set).
> I changed some of the hard limits in /etc/login.conf and now Snort
> Engine loads
> with no issue.
> It seems that I will also have to contend with a marked increase in
> the total # of packets v2.0 is dropping.
> (1.9.1 averaged lt 1% / 2.0 is averaging about 45+% dropped); I
> imagine this may also be related to a particular ulimit value?
Is this with any "search-method lowmem" stuff? Snort 2.0 ( given
memory ) should perform *much* better than 1.9 did.
Chris Green <cmg at ...402...>
More information about the Snort-devel