[Snort-users] 2GB limit?

Sammy X sammy7887 at ...131...
Thu Jan 9 11:25:12 EST 2003


I thought of that first but I was under the impression that ext2 under kernel 2.4.x had native large file support.  Wasn't this the first kernel with native LFS?  Does anyone have any more information on this or can you point me in the right direction?  Thanks again.
 Steve Suehring <snort at ...7160...> wrote:The limit you're running into is more likely a filesystem limit and not a 
snort limit.

Steve

On Thu, Jan 09, 2003 at 09:47:16AM -0800, Sammy X wrote:
> 
> Has anyone else run into any problems where logging in tcpdump format
> stops once the log file reaches 2GB? I'm using Snort 1.8.6 (Build
> 105) on a Redhat 7.2 box with kernel 2.4.7-10. My libpcap is the one
> the came with Redhat (0.6.2-9). From what I've read so far, it looks
> like the problem is with libpcap not having been compiled with LFS.
> Any thoughts/suggestions? Any help is greatly appreciated! Thanks in
> advance.
> 
> Sammy
> _________________________________________________________________
> 
> Do you Yahoo!?
> [1]Yahoo! Mail Plus - Powerful. Affordable. [2]Sign up now
> 
> References
> 
> 1. http://rd.yahoo.com/mail/mailsig/*http://mailplus.yahoo.com
> 2. http://rd.yahoo.com/mail/mailsig/*http://mailplus.yahoo.com


---------------------------------
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030109/e8226d46/attachment.html>


More information about the Snort-users mailing list