[Snort-users] Snort v2.6.0 (PCAP_FRAMES=max)

dajackman robby.lists at ...11827...
Tue Jun 6 15:17:14 EDT 2006


I didn't get that error, but I did have > 90% memory usage....I went
back to an older version until I can figure that out.

On 6/6/06, Ron Jenkins <rjenkins at ...12829...> wrote:
>
>
>
>
> I get the below error when tryp to use PCAP_FRAMES=max  .
>
>
>
> Initializing Network Interface eth1
>
> Error: setsockopt(PACKET_RX_RING): Cannot allocate memory
>
> ERROR: OpenPcap() device eth1 open:
>
>         malloc: Cannot allocate memory
>
> Fatal Error, Quitting..
>
>
>
> Below is the load line; any ideas?
>
>
>
> Thanks…
>
>
>
> PCAP_FRAMES=max  /usr/local/bin/snort -e -i eth1 -d -c /etc/snort/snort.conf
> -l /var/log/snort --dynamic-preprocessor-lib-dir
> /usr/local/lib/snort_dynamicpreprocessor/
>
>
>
>
>
>
>
> Ron Jenkins (SnortCP, MCNE, CNE6, MCP, CCNA, CCEA)
>  Senior Architect
>  Data Integrity, LLC
>  "We Integrate People with Solutions"
>  1724 Dallas Drive
>  Suite 11
>  Baton Rouge, La 70806
>  Office. 225.927.8030
>  Fax. 225.927.8033
>  Cell225.931.1632
>
> Email. rjenkins at ...12829...
>  Web. http://www.dibr.net
>
> (Aanval Reseller and Technology Partner)
>
> http://www.aanval.com/tour/dibr
>
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>


-- 
-dajackman




More information about the Snort-users mailing list