RE: Snort dies after a few days.

["Kjetil Laasby" <Kjetil () laasby com>]

Hi Shane

> This is a "bug" in the libpcap RPM that comes with RH 7.2.  I reported

> this issue to RH last week as I was having the same problem with 
> tcpdump.

On my RH7.2. I've recieved pcap_loop_error in dmesg and the whole
network went down..
----
snort: pcap_loop: recvfrom: Network is down 
snort: Snort received signal 3, exiting
----

This went on for about 2-3 hours, then the network restarted.. Thought
this 
was something with the network driver... Had not set my mind into
debugging mode yet..

But after your post erlier - I did the brilliant command "rpm -e
libpcap" 
(v.0.6xx - the rpm shipped with RH72) - downloaded libpcap-0.7.1.tar.gz 
and did the even more brilliant "make/make install" the error is 
eliminated.. 

Thanks a lot! ;-)

Greets,
Kjetil Laasby.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users