[Snort-users] Snort freezing

Y M snort at ...15979...
Tue Jun 24 16:22:41 EDT 2014


Would the guest running Snort still be accessible after this hang happens? Meaning you are able to ssh to it and what not. We had similar issues, but these were mostly hardware-related were the whole box freezes with no logs at all that would help identify the cause of the issue.

Date: Tue, 24 Jun 2014 22:05:19 +0200
From: jnebrera at ...16842...
To: conma293 at ...11827...
CC: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Snort freezing

May I ask if you're reloading the configuration in the time? We have reported issues when reloading instead of restarting the configuration 
El 24/06/2014 22:03, "conma293" <conma293 at ...11827...> escribió:

Hey guys still having the issue of snort freezing up after 4-12 days of operations, I think it is somehow due to stream5 preprocessor as how many days it operates seems to vary.



Thresholding all s5 (Sid=0) it runs for maybe 14 days.



When I target the nuisance sids to threshold I've noticed it runs for maybe only 8 days.



When I threshold nothing it runs for less.



This is driving me crazy - I'm running snort as vm on Ubuntu 12.04 lts on top of fedora 16 which contains the db and used to run snort native.



I'm thinking of rebuilding snort on fedora 20 and possible rebuilding the whole host to redhat, does anyone have any comment on that? Fedora v Ubuntu?? Problems with s5? Problems with Ubuntu?



Last question - it would seem maye prudent to wait till snort 2970 is out instead of snort 2961 from 2960 .. Any estimate of release date for stable release??











------------------------------------------------------------------------------

Open source business process management suite built on Java and Eclipse

Turn processes into business applications with Bonita BPM Community Edition

Quickly connect people, data, and systems into organized workflows

Winner of BOSSIE, CODIE, OW2 and Gartner awards

http://p.sf.net/sfu/Bonitasoft

_______________________________________________

Snort-users mailing list

Snort-users at lists.sourceforge.net

Go to this URL to change user options or unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users

Snort-users list archive:

http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users



Please visit http://blog.snort.org to stay current on all the latest Snort news!



------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news! 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140624/a91a86f2/attachment.html>


More information about the Snort-users mailing list