Re: snort bug? terminates itslef exhausted all 0 blocks of 1 treeroots; exiting

[James Hoagland <hoagland () SiliconDefense com>]

At 7:59 AM -0800 11/29/02, Erek Adams wrote:
> On Fri, 29 Nov 2002, Hanasaki JiJi wrote:
>
> >  Snort, with Debian Woody, is exiting with the below error.  Is this a
> >  bug?  What could be causing this?
> >
> >  Thank you
> >
> >  -*> Snort! <*-
> >  Version 1.8.4-beta1 (Build 91)
> >  By Martin Roesch (roesch () sourcefire com, www.snort.org)
> >  exhausted all 0 blocks of 1 treeroots; exiting; you might want to
> >  increase DEFAULT_MAX_ROOT_BLOCKS or DEFAULT_ROOT_BLOCK_SIZE in params.h
> >  next free root: 0; int: 0, leaf: 0
>
> One simple fix:  Update to 1.9.0


If you do that, be sure to grab the new (much enhanced) Spade as well:

  http://www.silicondefense.com/software/spice/

Best regards,

  Jim

> 1.8.4 is old and broken.  Simply grab the tarball from snort.org and
> rebuild.  It takes all of 'cd <snortdir> && ./configure && make && make
> install'.  You'll have to manually install the rules and snort.conf, but
> that's an easy one.
>
> I'm assuming you are using the .deb package.  Be sure to remove it
> completely before upgrading.
>
> Cheers!
>
> -----
> Erek Adams
> Nifty-Type-Guy
> TheAdamsFamily.Net
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Get the new Palm Tungsten T
> handheld. Power & Color in a compact size!
> http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


--
|*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
|*            --- Silicon Defense: IDS Solutions ---             *|
|*  hoagland () SiliconDefense com, http://www.silicondefense.com/  *|
|*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|


-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T 
handheld. Power & Color in a compact size! 
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users