Snort mailing list archives

RE: >2Gb capture files


From: Shriman Gurung <sg () dataconnection com>
Date: Sat, 7 Jul 2001 20:08:56 +0100

Doh! I didn't think of that.  (Sound of hand hitting head.)

shriman

-----Original Message-----
From: Martin Roesch [mailto:roesch () sourcefire com]
Sent: 06 July 2001 19:46
To: Clausing, James A (Jim), SOBUS
Cc: Shriman Gurung; 'snort-users () lists sourceforge net'
Subject: Re: [Snort-users] >2Gb capture files


Ding ding ding!!!  Give that man a cigar.

    -Marty

"Clausing, James A (Jim), SOBUS" wrote:

        Am I missing something?  More than one snort process can listen on
a
given interface, so start the new one first, then kill the old one.  There
should be an overlap of a few seconds, but nothing will be lost.

---Jim

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: