[Snort-users] snort dies complaining of too many links

Martin Roesch roesch at ...1935...
Wed May 24 07:02:29 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You might be out of inodes, have you thought about using one of  
Snort's other logging modes?

      -Marty

On May 24, 2006, at 1:54 AM, Hubert Edward kIYIMBA wrote:

> My snort IDS dies instantly with the following message log.
>
> May 23 15:34:19 localhost snort: Rule application order: - 
> >activation->dynamic->alert->pass->log
> May 23 15:34:19 localhost snort: Log directory = /var/log/snort May  
> 23 15:34:20 localhost snort: Snort initialization completed  
> successfully (pid=7800) May 23 15:34:30 localhost snort: FATAL  
> ERROR: OpenLogFile() => mkdir(/var/log/snort/137.165.202.188) log  
> directory: Too many links May 23 15:34:30 localhost kernel: device  
> eth0 left promiscuous mode
>
>
> Please help out
>
> HE
>
> Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and  
> 30+ countries) for 2¢/min or less.

- --
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFEdGdSqj0FAQQ3KOARAr3RAJ9cJjywXK5XDbCa5YLBOlQI+Bol4ACfQg7u
mcrKEaBXuM8z5DqCK7dbwLw=
=H5zJ
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list