Snort mailing list archives
Re: Snort instance crashes
From: Bhagya Bantwal <bbantwal () sourcefire com>
Date: Thu, 30 Dec 2010 10:25:34 -0500
Hello JL, Do you have a core file for this crash? Also, can you please send us the pcap and conf file that causes the core? -B On Thu, Dec 30, 2010 at 8:54 AM, J. L. Cabral <jelocabral () gmail com> wrote:
Hi, I have this: Version 2.9.0 (Build 68) '''' By Martin Roesch & The Snort Team: http://www.snort.org/snort/snort-team Copyright (C) 1998-2010 Sourcefire, Inc., et al. Using libpcap version 1.1.1 Using PCRE version: 7.6 2008-01-28 Thanks in advance. On Thu, Dec 30, 2010 at 10:39 AM, rmkml <rmkml () yahoo fr> wrote:Hi JL, what exactly snort v2.9.0.x version please? Regards Rmkml On Thu, 30 Dec 2010, J. L. Cabral wrote:Dear, I have 2 Snort 2.9 instances running at the same time, one sniffes on eth1 and the other on eth2. They both run OK for a certain period of time, and after that the always the first instance crashes and I've just the second instance up. What can be the cause of this crash and how can tell Snort to log this error events in a log file, because under /var/log/snort there is not a error log file ????? Thanks a lot JeLo------------------------------------------------------------------------------Learn how Oracle Real Application Clusters (RAC) One Node allowscustomersto consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------------ Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort instance crashes J. L. Cabral (Dec 30)
- Message not available
- Re: Snort instance crashes J. L. Cabral (Dec 30)
- Re: Snort instance crashes Bhagya Bantwal (Dec 30)
- Re: Snort instance crashes J. L. Cabral (Dec 30)
- Message not available
- Re: Snort instance crashes evilghost () packetmail net (Dec 30)