Snort mailing list archives

Snort quits when I portscan


From: Fnystal <fnystal () get2net dk>
Date: Sun, 16 Dec 2001 13:56:44 +0100

I run snort with the following command
snort -c /home/snort/snort.conf -u xxx,
and snort quits with the message below, when I start a portscan (nmap syn scan). Any help, pointers or comments are appreciated.

xxx is the userID of my snort user. The .conf is from the rulesset and modified for my network. I compile snort --with-mysql, and are running with kernel v. 2.4.16, gcc version 2.96, and glibc 2.2.4-19.

I have tried to find help elsewhere in the faq and manual, but with no help. I'm not good at C, but I should be able to change a few constants, but I too stupid to find the param.h in the snort src.

Fnystal

---- SNORT OUTPUT ------

Rule application order: ->activation->dynamic->alert->pass->log

--== Initialization Complete ==--

-*> Snort! <*-
Version 1.8.3 (Build 88)
By Martin Roesch (roesch () sourcefire com, http://www.snort.org)
exhausted all 0 blocks of 1 treeroots; exiting; you might want to increase DEFAULT_MAX_ROOT_BLOCKS or DEFAULT_ROOT_BLOCK_SIZE in params.h next free root: 0; int: 0, leaf: 0

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: