Re: (no subject)

[Dan O'Brien via Snort-users <snort-users () lists snort org>]

I haven’t received any information in base in 3days. I have multiple snort.u2.xxxxxxxx files in /var/log/snort.  I just 
dropped and redid my MySQL database.

Everything is running.  From what I can tell, alerts stopped out of the blue. No changes to the system. 

Thanks,
Dan

"Better is a poor man who walks in his integrity than a rich man who is crooked in his ways." - Proverbs 28:6

Sent from my iPad

> On Feb 6, 2018, at 9:45 PM, Joel Esler (jesler) <jesler () cisco com> wrote:
>
> For what?
>
> Sent from my iPhone
>
> > On Feb 6, 2018, at 21:06, Dan O'Brien via Snort-users <snort-users () lists snort org> wrote:
> >
> > No ideas?
> >
> > Thanks,
> > Dan
> >
> > "Better is a poor man who walks in his integrity than a rich man who is crooked in his ways." - Proverbs 28:6
> >
> > Sent from my iPad
> >
> > > > On Feb 5, 2018, at 11:22 PM, wkitty42 () windstream net wrote:
> > > >
> > > > On 02/05/2018 08:41 PM, Dan O'Brien wrote:
> > > > And I have multiple snort.u2.xxxxxxxx files in /var/log/snort.  My computer slowed to a crawl from processing the 
> > > > any-to-any rules.  Once I commented it out it is back to running normally.  Base just must not be making the 
> > > > connection?
> > >
> > >
> > > yes, any-to-any rules will certainly raise the processing requirements... i guess you can ignore my previous post 
> > > with those two random eWAGs, then... those two are pretty common problems we see...
> > >
> > >
> > > -- 
> > > NOTE: No off-list assistance is given without prior approval.
> > >     *Please keep mailing list traffic on the list unless*
> > >     *a signed and pre-paid contract is in effect with us.*
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists snort org
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.snort.org/mailman/listinfo/snort-users
> > >
> > > Please visit http://blog.snort.org to stay current on all the latest Snort news!
> > >
> > > Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists snort org
> > Go to this URL to change user options or unsubscribe:
> > https://lists.snort.org/mailman/listinfo/snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest Snort news!
> >
> > Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette