[Snort-devel] Re: Snort 2.0 on OpenBSD 3.3 Errors Out Post-Init(bug?)

Chris Green cmg at ...402...
Wed Apr 23 08:15:11 EDT 2003


"James Webb" <jtwebb at ...1932...> writes:

> Dan + Chris,
>
> Thank you both for the info.  The culprit was ulimit.  Default values
> in OBSD 3.3
> evidently are not adequate for running Snort v2.0 on my box (933 PIII -
> 256MB Physical RAM with default rule set).
>
> I changed some of the hard limits in /etc/login.conf and now Snort
> Engine loads
> with no issue.
>
> It  seems  that I will also have to contend with a marked increase in
> the total # of packets v2.0 is dropping.
> (1.9.1 averaged lt 1% /  2.0 is averaging about 45+% dropped); I
> imagine this may also be related to a particular ulimit value?

Is this with any "search-method lowmem" stuff?  Snort 2.0 ( given
memory ) should perform *much* better than 1.9 did.
-- 
Chris Green <cmg at ...402...>
Eschew obfuscation.




More information about the Snort-devel mailing list