[Snort-users] A few issues with Snort

JJC cummingsj at ...11827...
Fri Jan 11 10:15:16 EST 2008


There are a ton of writeups on this out there (google)..

you need to modify your search-method to either lowmen or ac-bnfa (I suggest
the latter)

Regards,
JJC
http://global-security.blogspot.com

On Jan 11, 2008 8:20 AM, Julio Cesar Gazquez <jgazque0 at ...14279...>
wrote:

> Hi.
>
> I'm starting a Snort+Barnyard+BASE deployment, and I found a few issues.
>
> First, the most scary. I noticed BASE stopped announcing insertion of new
> alerts, and when I checked:
>
> Jan 11 08:10:32 fwext barnyard[2224]: FATAL ERROR: Out of memory (wanted
> 3901751354 bytes)
> Jan 11 08:10:32 fwext barnyard[2224]: Exiting
>
> WTF????
>
> There is such kind of allocation issue known?
>
> The sensor software configuration is as follows:
>
> Debian 3.1
> Snort 2.3.2 (Build 12)
> Barnyard Version 0.2.0 (Build 32), linked against libssl.so.0.9.7 and
> libmysqlclient.so.14
>
>
> Thanks in advance.
>
> --
> Julio César Gázquez
> Seguridad Informática
> Municipalidad de Rosario
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
>
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20080111/bc7df6ca/attachment.html>


More information about the Snort-users mailing list