Re: Snort is going down sometimes...

["Douglas F. Elznic" <dfe () anize org>]

On 23 Jul 2001 19:30:18 +0200, Ralf Hildebrandt wrote:
> On Mon, Jul 23, 2001 at 06:48:40PM +0200, Marcin Zurakowski wrote:
>
> > OK, I can do it and it will work, but I think it's not a good solution.
>
> Of course not. If all software was as "stable" as qmail or postfix, we
> wouldn't need daemontools...
>
> > SNORT in production systems MUST be stable. I'm not saying it is not, but
> > I want to know why snort is dying on my system. I have snort on other 2
> > systems - RH6.2 and RH7.0 with simillar configuration and everything is
> > working fine.
> >
> > How to enable debug mode in kernel to get know why kernel kills snort?
>
> Excessive memory usage I guess..        be afraid of what you don't see!

linux 2.4 needs a swa space 2x greater than physical ram. Check this out
on you r system. THere are links about it somehere on kt.zork.net under
kernel traffic

--
+------------------+---------------------------------------------------+
|  Douglas Elznic  |        GPG Key: <dfe () anize org> 0x13300731        |
+------------------+---------------------------------------------------+
|  Thinker-@-Large | Pub Key:                                          |
|   dfe () anize org  | http://web.syr.edu/~dfelznic/dfe.asc              |
| dfelznic () syr edu | Fingerprint:                                      |
|  dfe () lsb syr edu | EF9C 7E3C 0327 EAAF 1E20 5299 0805 7531 1330 0731 |
| http://anize.org | * This key will be used for all email addresses * |
+----------------------------------------------------------------------+
|         All emails should be accompanied by a gpg signature.         |
+----------------------------------------------------------------------+

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users