Snort mailing list archives

Re: Endace Dag Card w/ Snort


From: Jason Ish <lists () unx ca>
Date: Thu, 16 Mar 2017 09:09:01 -0600

On Thu, Mar 2, 2017 at 7:58 PM, Alvin DeJesus <a.dejesus5 () gmail com> wrote:

Hello Snort Peeps,

We'd like to ask the community if anyone has experience with starting
multiple instances of snort with an Endace's Dag card. We've configured the
card to run with multiple streams but as snort is starting up the Dag card
will eventually spit out the following error.

Error: snort[4658]: FATAL ERROR: Can't start DAQ (-1) - dag_attach_stream:
Device or resource busy#012!


I have found that sometimes it requires a 1 second sleep between starting
instances. If that doesn't work I suggest contacting Endace support.

Jason
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: