AW: (Snort-users) snort dying

[<sandro.poppi () wacker com>]

Well I've run snort 1.7 for a couple of months and last week updated to snort
1.8.1 (all on RedHat Linux 7.0) I haven't had that problem. But what I do is get
new vision.rules and then restart snort once a night ;) So maybe I am still
"vulnerable" but do not run into it.

This may just be a workaround for your prob.

Ciao,
Sandro


> -----Ursprüngliche Nachricht-----
> Von: "Neal Timm" <ntimm () austin rr com> at Internet
> Gesendet: Montag, 10. September 2001 15:52
> An: "Fraser Hugh" <hugh_fraser () dofasco ca> at Internet
> Cc: snort-users () lists sourceforge net at Internet
> Betreff: RE: [Snort-users] snort dying
>
>
> Have plent of disk space and running on a 900 system and just
> monitoring a
> very low traffic home lan.
>
> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net]On Behalf Of
> Fraser Hugh
> Sent: Monday, September 10, 2001 09:50 AM
> To: 'Ralf Hildebrandt'; Got Snort?
> Subject: RE: [Snort-users] snort dying
>
>
> Make sure the obvious stuff is taken care of... running out
> of disk space
> for log files is the one that caused be quiet grief before I
> configured the
> sensors to watch themselves for disk space, cpu, etc..
>
> > -----Original Message-----
> > From:        Ralf Hildebrandt [SMTP:Ralf.Hildebrandt () innominate com]
> > Sent:        Monday, September 10, 2001 10:13 AM
> > To:        Got Snort?
> > Subject:        Re: [Snort-users] snort dying
> >
> > On Mon, Sep 10, 2001 at 06:49:31AM -0700, Erek Adams wrote:
> >
> > > Upgrade.  Go to 1.8.1 and see if you're seeing the same
> thing.  I've
> > never had
> > > to setup anything to keep it alive.
> >
> > Strange thing is that I have snort running on various boxes, and on
> > HP-UX it doesn't crash, while on RH it seems to crash once a day.
> > Both use the same libpcap and snort version.
> >
> > --
> > Ralf.Hildebrandt () innominate com
> innominate AG
> > +49.(0)30.308806-62  fax: -77
> networking people
> > I trust Microsoft.
> > I trust them to be spectacularly unable to get anything right,
> > including and especially hard things like large-scale industrial
> > espionage. Sure, they'll make clownish, clumsy stabs at it
> and fail in
> > predictable, amusing and embarassing ways, and then do it all over
> > again. And their victi^H^H users will not only forgive them
> but spend
> > a lot of energy making up excuses for them.
> >
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users