[Snort-users] Snort freezing

Jaime Nebrera jnebrera at ...16842...
Tue Jun 24 16:05:19 EDT 2014


May I ask if you're reloading the configuration in the time? We have
reported issues when reloading instead of restarting the configuration
El 24/06/2014 22:03, "conma293" <conma293 at ...11827...> escribió:

> Hey guys still having the issue of snort freezing up after 4-12 days of
> operations, I think it is somehow due to stream5 preprocessor as how many
> days it operates seems to vary.
>
> Thresholding all s5 (Sid=0) it runs for maybe 14 days.
>
> When I target the nuisance sids to threshold I've noticed it runs for
> maybe only 8 days.
>
> When I threshold nothing it runs for less.
>
> This is driving me crazy - I'm running snort as vm on Ubuntu 12.04 lts on
> top of fedora 16 which contains the db and used to run snort native.
>
> I'm thinking of rebuilding snort on fedora 20 and possible rebuilding the
> whole host to redhat, does anyone have any comment on that? Fedora v
> Ubuntu?? Problems with s5? Problems with Ubuntu?
>
> Last question - it would seem maye prudent to wait till snort 2970 is out
> instead of snort 2961 from 2960 .. Any estimate of release date for stable
> release??
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Open source business process management suite built on Java and Eclipse
> Turn processes into business applications with Bonita BPM Community Edition
> Quickly connect people, data, and systems into organized workflows
> Winner of BOSSIE, CODIE, OW2 and Gartner awards
> http://p.sf.net/sfu/Bonitasoft
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140624/219c533a/attachment.html>


More information about the Snort-users mailing list