Re: Snort dies

["Steven J. Scott" <sjscott007 () earthlink net>]

I can answer you first problem of snort dieing. First stop snort.  Then
delete the alerts file.  Next you want to disable the first pre-processor.
I think its called ans1_something.  This plugin is filling your logs up.
Its very noisy.

Steve
----- Original Message -----
From: "Cesar Andres Navarrete R." <cesanavr () etb com co>
To: <snort-users () lists sourceforge net>
Sent: Wednesday, November 06, 2002 10:41 AM
Subject: [Snort-users] Snort dies


Hi im kind of newbie using snort, im used, the enterprise guide, to
install snort with acid, snort center and rh 7.3.
The daemon starts but after some time the daemon suddenly die also in
/var/log/snort appears an alert 2gb file.
Also with snortcenter I try to start the daemon again and the script
throws something like "couldn´t find the config file for snort."
/root/.snortrc or something like that. Im using the same line wich I
used in  snortd at /etc/rc.d/init.d at the snort line command.

Thanks. and sory for the bad english.

--

_________________________________
Cesar Andres Navarrete R.
Analista de Seguridad Informática
007mundo.com - ETB SA ESP
Bogota - Colombia





-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users



-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users