Re: [RGSPAM] Re: snort process getting killed

[Matt Kettler <mkettler () evi-inc com>]

Joel Esler wrote:
> I am sure you mean that Snort 'dies' as opposed to it getting killed. (Correct?)

In the first post of the thread, Doug identifies it as being killed with
SIGSEGV, at least according to truss. (Solaris equivalent of strace, AFAIK)

---------------------
451:        Incurred fault #6, FLTBOUNDS  %pc = 0x08072EB1
451:          siginfo: SIGSEGV SEGV_MAPERR addr=0x00000001
451:        Received signal #11, SIGSEGV [default]
451:          siginfo: SIGSEGV SEGV_MAPERR addr=0x00000001
451:            *** process killed ***
---------------------

> What do your logs say (/var/log/messages commonly)?  Anything?
>
>
> On Wed, May 16, 2007 at 12:13:29PM -0400, it looks like doug schmidt sent me:
> > Have gone through acs, ac, and lowmem so far. On acs/ac snort gets
> > kill around 10-15 minutes later. With lowmem, it was killed within a
> > minute or two.
> >
> > ~doug

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users