Re: snort >= 2.1.2 on OpenBSD -current and memory limits

[Jon Hart <warchild () spoofed org>]

Replying to myself...

One way to work around this is to trim the amount of rules you load.  I
excluded several less important .rules files and snort loads and runs
fine.  

However, after some amount of time snort will inevitably die because of
more malloc() failures:

        snort: FATAL ERROR: Unable to allocate memory! (13672 bytes in use)

So I could continue working around this by running snort in a crippled
state, but eventually it will die.  This could be because of legitimate
memory increases (like from frag2), or because of memory leaks, or
something entirely different.

If anyone has run into this problem, or has suggestions regarding how
this can be fixed, I'm all ears.

thanks,

-jon


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users