Re: snort process getting killed

["doug schmidt" <douglas.j.schmidt () gmail com>]

fwiw. I had rebooted the box yesterday, checking to see if recently
added memory was an issue. Upon reboot I forgot to plumb the IP'less
interface it was sniffing on.
Without plumbing the interface, I had tried all search methods with
same results.
Im going to try this again today with the interface plumbed.

(lowmem,acs,ac,ac-std,ac-banded,ac-sparsebands,mwm)

Found this info, but I do not get the mem error in messages. This is
what made me try the different methods.

http://osdir.com/ml/security.ids.snort.devel/2006-08/msg00014.html

Im going to try the different search methods again today.
Also, 2.6.1.5 was killed off at some point last night.

2.6.1.5 was running last night with no method specifically specified.

~doug

On 5/16/07, Joel Esler <joel.esler () sourcefire com> wrote:
> What search-method are you using, out of curiosity.  Did you tell us or have you not said yet.
>
> j

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users