Snort mailing list archives
Help(2)? Broken binary (-b) snort-logfile (bogus pcap header)
From: "Chr. v. Stuckrad" <stucki () math fu-berlin de>
Date: Mon, 22 Oct 2001 16:56:31 +0200
Hi! Curiouser and couriouser... Having the problem that every logfile I get is broken since saturday I reinstalled libpcap-0.6.2 and tcpdump-362 and snort-(current cvs) and found out with 'lsof' that snort did open the logfile more then once in parallel (may be it writes to the wrong position?). So I changed my rules to never use the same logfilename twice, BUT NOW EVERY (of the three) LOGFILE(s) has the same problem: - reading it with option '-dvr ...' a few packages ok, then at the end 'Snort received signal 3, exiting' This is on a freshly installed SuSE 7.2, Kernel upgraded to 2.4.12. I'm completely lost there... Stucki -- Christoph von Stuckrad * * | nickname | <stucki () math fu-berlin de> \ Freie Universitaet Berlin |/_* | 'stucki' | Tel(days):+49 30 838-75 459 | Fachbereich Mathematik, EDV |\ * | if online | Tel(else):+49 30 77 39 6600 | Arnimallee 2-6/14195 Berlin * * | on IRCnet | Fax(alle):+49 30 838-75454 / _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Help(2)? Broken binary (-b) snort-logfile (bogus pcap header) Chr. v. Stuckrad (Oct 22)