Re: Snort Crashing with OpenAppID enabled - Resending

[Y M <snort () outlook com>]

Mostly unlikely. What version of OpenAppID is being used?

At the beginning of the messages, packet stats indicate that snort has processed some packets, was this from the same 
run when the crash happened?

Sent from Mobile




On Sat, Nov 28, 2015 at 9:39 AM -0800, "Rafael Leiva-Ochoa" <spawn () rloteck net<mailto:spawn () rloteck net>> wrote:

This is the second time I compiled, and I'm still having the same problems...: (

Could it be the OpenAppID detectors?

On Saturday, November 28, 2015, Y M <snort () outlook com<mailto:snort () outlook com>> wrote:
Quickly skimming through I couldn't identify anything of specific value.

Did you recompile snort with --enable-openapp-id?

Sent from Mobile




On Wed, Nov 25, 2015 at 9:54 PM -0800, "Rafael Leiva-Ochoa" <spawn () rloteck net> wrote:

Any idea everyone?

On Tuesday, November 24, 2015, Rafael Leiva-Ochoa <spawn () rloteck net> wrote:
Hi All,

    Sorry for resending this, but the first email was too long.

I have been running snort without OpenAppID without any problem, but now, since I have enabled OpenAppID, it seems to 
be crashing. Here is the /var/log/message and the /var/snort.snort.conf.

Thanks,

Rafael

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!