[Snort-devel] Snort 2.4.3 perfmonitor not finishing log entries properly

Alex Butcher alex.butcher at ...2437...
Fri Mar 3 07:48:03 EST 2006


Hi -

Sometimes, the perfmonitor pre-processor in 2.4.3 doesn't finish its log
entries properly (presumably when snort gets killed or dies), leading to
lines with the wrong number of fields. Couldn't snort do some signal
trapping and make sure it finishes log entries before it dies?

Cheers,
Alex.
-- 
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




More information about the Snort-devel mailing list