[Snort-users] Snort dying

Zakai Kinan titanyen2000 at ...131...
Tue Feb 9 22:16:14 EST 2010


No, I do not have any cron jobs running on that box.  I think that it is a rule because the log says nothing.  It runs for several days with no problems.  It dies when it processes the most amount of packets.  The box has 4GB of memory.  I am using version 2.8.4.1.  I will try turning off the SO rules.

Thanks,

--- On Mon, 2/8/10, Leon Ward <snort at ...14165...> wrote:

> From: Leon Ward <snort at ...14165...>
> Subject: Re: [Snort-users] Snort dying
> To: "Joel Esler" <jesler at ...1935...>
> Cc: "Zakai Kinan" <titanyen2000 at ...131...>, "Snort Users" <snort-users at ...6193...sts.sourceforge.net>
> Date: Monday, February 8, 2010, 2:59 AM
> Have you got a Cron job setup?
> 
>  -L
> 
> > On 8 February 2010 00:15, Joel Esler <jesler at ...1935...>
> wrote:
> >> What makes you think it's a rule?  What does the
> log say?
> >>
> >> --
> >> Joel Esler
> >> 302-223-5974
> >> Sent from my iPhone
> >>
> >> On Feb 7, 2010, at 5:05 PM, Zakai Kinan <titanyen2000 at ...131...>
> wrote:
> >>
> >>> I have had snort running for a couple of
> months now.  It is stopping
> >>> from time to time and I can't figure out why.
>  It is probably due to
> >>> a rule.  The log is of no help.  Does anyone
> have a way to tell
> >>> which rule is causing the problem?
> >>>
> >>>
> >>> TIA,
> >>>
> >>>
> >>> Zak
> >>>
> >>>
> >>>
> >>>
> >>> ---
> >>> ---
> >>> ---
> >>>
> ---------------------------------------------------------------------
> >>> The Planet: dedicated and managed hosting,
> cloud storage, colocation
> >>> Stay online with enterprise data centers and
> the best network in the
> >>> business
> >>> Choose flexible plans and management services
> without long-term
> >>> contracts
> >>> Personal 24x7 support from experience hosting
> pros just a phone call
> >>> away.
> >>> http://p.sf.net/sfu/theplanet-com
> >>>
> _______________________________________________
> >>> Snort-users mailing list
> >>> Snort-users at lists.sourceforge.net
> >>> Go to this URL to change user options or
> unsubscribe:
> >>> https://lists.sourceforge.net/lists/listinfo/snort-users
> >>> Snort-users list archive:
> >>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >>
> >>
> ------------------------------------------------------------------------------
> >> The Planet: dedicated and managed hosting, cloud
> storage, colocation
> >> Stay online with enterprise data centers and the
> best network in the business
> >> Choose flexible plans and management services
> without long-term contracts
> >> Personal 24x7 support from experience hosting pros
> just a phone call away.
> >> http://p.sf.net/sfu/theplanet-com
> >> _______________________________________________
> >> Snort-users mailing list
> >> Snort-users at lists.sourceforge.net
> >> Go to this URL to change user options or
> unsubscribe:
> >> https://lists.sourceforge.net/lists/listinfo/snort-users
> >> Snort-users list archive:
> >> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >>
> >
> 







More information about the Snort-users mailing list