RE: Freebsd Snort starts with no errors but goes to bpf in top 0% cpu

["Wirth, Jeff" <WirthJe () DNB com>]

Alan,

> We are experimenting with a couple Snort boxes on 1.8.6 using 
> FreedBSD 4.4.
> They were running fine for about a month, but now whenever 
> Snort is started
> it goes immediately into the "bpf" state when you look at it 
> using top and
> never logs anything to the database.  A restart or reboot 
> gives the same
> thing.  Anyone have any ideas, it's getting frustrating.

Are you seeing any related error messages in syslog?  Do you experience the
same type of response running tcpdump or snort in sniffer mode?  What type
of hardware are you using?  

I had some similar issues with FreeBSD 4.3/4.4 when using specific nics (the
drivers where not ready for primetime...).  Everything would be running fine
and then nothing...

- Jeff 

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users