[Snort-devel] Snort Core dumping

Cory Michal cmichal at ...1978...
Mon May 19 08:15:07 EDT 2003


No I don't have it because it didn't go into the database. It doesn't seem
dependant on the packet, it seems more dependant on the length of time that
snort has been running.

I'll try running it without the pgsql stuff enabled and see if it seg faults
and get back to you shortly.

Cory Michal
cmichal at ...1978...
920.203.2622

Exceed Security Systems


-----Original Message-----
From: Chris Green [mailto:cmg at ...402...]
Sent: Tuesday, May 13, 2003 9:23 AM
To: Cory Michal
Subject: Re: [Snort-devel] Snort Core dumping


"Cory Michal" <cmichal at ...1978...> writes:

> I'm using snort 2.0 and postgresql-7.2.1.
>
> I created the tables exactly from the sql that came with snort.
> Here is what my snort db looks like. A describe of event is at the bottom.

Do you have the packet associated with this event?

Since you are using postgresql 7.2, the changes to the timestamp field
don't apply from Frank AFAIK.

Do you encounter any problems not using the postgresql?
--
Chris Green <cmg at ...402...>
Don't use a big word where a diminutive one will suffice.





More information about the Snort-devel mailing list