[Snort-users] snort dies complaining of too many links
roesch at ...1935...
Wed May 24 07:02:29 EDT 2006
-----BEGIN PGP SIGNED MESSAGE-----
You might be out of inodes, have you thought about using one of
Snort's other logging modes?
On May 24, 2006, at 1:54 AM, Hubert Edward kIYIMBA wrote:
> My snort IDS dies instantly with the following message log.
> May 23 15:34:19 localhost snort: Rule application order: -
> May 23 15:34:19 localhost snort: Log directory = /var/log/snort May
> 23 15:34:20 localhost snort: Snort initialization completed
> successfully (pid=7800) May 23 15:34:30 localhost snort: FATAL
> ERROR: OpenLogFile() => mkdir(/var/log/snort/184.108.40.206) log
> directory: Too many links May 23 15:34:30 localhost kernel: device
> eth0 left promiscuous mode
> Please help out
> Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and
> 30+ countries) for 2¢/min or less.
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
-----END PGP SIGNATURE-----
More information about the Snort-users