[Snort-users] snort process getting killed

Joel Esler joel.esler at ...1935...
Wed May 16 09:56:56 EDT 2007


Add ac-bnfa to your testing of search methods.


On Wed, May 16, 2007 at 09:50:32AM -0400, it looks like doug schmidt sent me:
> fwiw. I had rebooted the box yesterday, checking to see if recently
> added memory was an issue. Upon reboot I forgot to plumb the IP'less
> interface it was sniffing on.
> Without plumbing the interface, I had tried all search methods with
> same results.
> Im going to try this again today with the interface plumbed.
> 
> (lowmem,acs,ac,ac-std,ac-banded,ac-sparsebands,mwm)
> 
> Found this info, but I do not get the mem error in messages. This is
> what made me try the different methods.
> 
> http://osdir.com/ml/security.ids.snort.devel/2006-08/msg00014.html
> 
> Im going to try the different search methods again today.
> Also, 2.6.1.5 was killed off at some point last night.
> 
> 2.6.1.5 was running last night with no method specifically specified.
> 
> ~doug
> 
> On 5/16/07, Joel Esler <joel.esler at ...1935...> wrote:
> > What search-method are you using, out of curiosity.  Did you tell us or have you not said yet.
> >
> > j
> >
> >
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 






+-----
joel esler | security consultant | Sourcefire | http://demo.sourcefire.com/jesler.pgp.key
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20070516/fb0c543e/attachment.sig>


More information about the Snort-users mailing list