[Snort-users] snort 1.8.1 dies
mailinglists at ...1153...
Fri Oct 26 11:04:08 EDT 2001
I've installed snort 1.8.1 on a p133 with 48mb ram, linux kernel 2.4.4.
The only log entries I've got are
Oct 25 12:36:39 mx kernel: device eth1 left promiscuous mode
Oct 26 18:12:44 mx kernel: device eth1 left promiscuous mode
and then snort dies.
Config is the following:
var HOME_NET ip.address.of.host/32
var EXTERNAL_NET network.address/subnetmask
var SMTP ip.address.of.host/32
var HTTP_SERVERS $HOME_NET
var DNS_SERVERS ip.address.of.host/32
# include backdoor.rules
# include shellcode.rules
# include policy.rules
# include info.rules
# include icmp-info.rules
# include virus.rules
I've never experienced this problem before with previous snort version on other systems although I
had a similar amount of rules running.
I'm grateful for every tip to solve this problem.
More information about the Snort-users