[Snort-users] 2.0 GB Max file size on linux packet captures

Erek Adams erek at ...950...
Wed Sep 24 16:25:06 EDT 2003

On Wed, 24 Sep 2003, Scott Williams (Network) wrote:

> When I do tcpdump or snort packet captures to disk, I keep hitting a max
> file size of 2GB. I've tried different versions of RedHat. From web
> searches, it seems like I need to enable Large File Support (LFS), but
> this doesn't seem well documented or supported.
> Does anyone have experience doing this or is there a linux distro that
> defaults to LFS?

Sure.  It's called "Solaris" or "OpenBSD".  ;-)


(All your answers belong to Google)


Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

More information about the Snort-users mailing list