[Snort-users] Snort dies after a few days.

Emilio Mira emial at ...4389...
Mon Mar 25 09:31:17 EST 2002

I'm currently using kernel 2.4.18 and updated libpcap to 0.7.1 (last
version if I'm not wrong) cause problems with ATM.

In any case I'll try to get more info with a debugging-enabled snort.


On Mon, 25 Mar 2002, Phil Wood wrote:

> There has been a discussion on the tcpdump.org list that indicates that RH 7.2
> is broken in regards to libpcap and packet timestamps.  You might want to
> upgrade your kernel to 2.4.18 (www.kernel.org).
> [not for the uninitiated.]
> PS: If you make sure that your snort environment is providing "core" dumps,
>       prompt: ulimit -c 10000000
>     prior to starting snort, and you have a snort compiled with '-g', then
>     you could send information to the list that would be helpful.  See:
>       BUGS
> Later, 
Emilio Mira
e-mail:		emial at ...4389...

More information about the Snort-users mailing list