[Snort-users] Snort dying...

Charlie Hand,,, charlieh at ...155...
Wed Mar 14 20:39:30 EST 2001

I'm getting the same kind of Dr. Watson message
(only different address). I'm running snort 1.7
under vmware in an NT 2000 guest.

We found that turning off the defrag preprocessor
eliminated the errors. Try that, please, and
report back.

Also, we have alot of "large UDP" packets on the
network (somebody listening to real audio perhaps).
Naturally, when the defrag preprocessor is turned
off, those "large UDP" hits go away, too.


Ian Campbell wrote:

> Hi again folks,
> I just got my snortster box running over the past couple of days, but I'm
> finding that it keeps dying with a Dr. Watson error...
> I'm running the Win32 port (1.7) on an NT4 workstation SP6a box. It's a Dell
> PIII-700 with 256 MB of RAM and 2 3com 3C905B's.
> Also running V2.02 of Winpcap. The text of the Dr. Watson is:
> The application, , generated an application error The error occurred on
> 3/14/2001 @ 14: 2: 8.641 The exception generated was c0000005 at address
> 0041a0ff (<nosymbols>) 
> Anyone got any idea? TIA,
> Ian
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

More information about the Snort-users mailing list