[Snort-users] Server locks up every 5-6 days

Ron 'The InSaNe One' Rosson insane at ...321...
Mon Jan 15 20:24:24 EST 2001


I have a server running at a clients that has a problem of rebooting
every 5-6 days. It duties are as follows:

	Provide NAT for 25 workstations
	Be a Network Firewall
	Be a Network IDS
	Run a Web server for easy viewing for the Higher-ups

The Server is FreeBSD 4.2-STABLE as of Dec 21, 2000 running on a k6-2
400 (mobo has the pcib2: <VIA 82C598MVP (Apollo MVP3) Chipset>. The
internal and externla interfaces are Intel Pro 10/100B/100+ Ethernet
cards. Machine has 64megs of RAM

The NAT and Firewall chores are being handled by ipfilter 3.4.8

The IDS is snort version 1.7 logging to a mysql database (localhost)
running the vision.conf ruleset (http://whitehats.com/ids)

The webserver is Apach version 1.3.14 with mod_php4 (to allow ACID for
snort to be viewed proplerly).

The only public port open to this box is 22 (ssh) for administrative
purposes. All other ports are blocked or filtered.



More information about the Snort-users mailing list