Snort mailing list archives
Snort quits when I portscan
From: Fnystal <fnystal () get2net dk>
Date: Sun, 16 Dec 2001 13:56:44 +0100
I run snort with the following command snort -c /home/snort/snort.conf -u xxx,and snort quits with the message below, when I start a portscan (nmap syn scan). Any help, pointers or comments are appreciated.
xxx is the userID of my snort user. The .conf is from the rulesset and modified for my network. I compile snort --with-mysql, and are running with kernel v. 2.4.16, gcc version 2.96, and glibc 2.2.4-19.
I have tried to find help elsewhere in the faq and manual, but with no help. I'm not good at C, but I should be able to change a few constants, but I too stupid to find the param.h in the snort src.
Fnystal ---- SNORT OUTPUT ------ Rule application order: ->activation->dynamic->alert->pass->log --== Initialization Complete ==-- -*> Snort! <*- Version 1.8.3 (Build 88) By Martin Roesch (roesch () sourcefire com, http://www.snort.org)exhausted all 0 blocks of 1 treeroots; exiting; you might want to increase DEFAULT_MAX_ROOT_BLOCKS or DEFAULT_ROOT_BLOCK_SIZE in params.h next free root: 0; int: 0, leaf: 0
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort quits when I portscan Fnystal (Dec 16)