Snort mailing list archives
Re: ACSM-No Memory: queue_add!
From: Marc Norton <mnorton () sourcefire com>
Date: Wed, 18 Jul 2007 17:11:19 -0400
Your out of memory for the snort process. The AC pattern matcher can use a bunch. In snort.conf you can change this to a different lower memory pattern matcher using: config detection: search_method ac-bnfa be sure to check for a 'config detection: search_method' line 1st, if you have one it probably uses 'ac' instead of 'ac-bnfa', just change 'ac' to 'ac-bnfa'. REJK295 wrote:
I am relatively new to snort so I'm not really sure were to start. I am currently receiving this message when trying to run snort 2.6.1.5 on OpenSuSe10.2 "ACSM-No Memory: queue_add!" . It seems to be coming up after the line "Decoding Ethernet on interface eth1" . Any help would be greatly appreciated. ____________________________________________________________________________________ Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center. http://autos.yahoo.com/green_center/ ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Marc Norton Sourcefire,Inc 410-423-1924 www.snort.org www.sourcefire.com ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ACSM-No Memory: queue_add! REJK295 (Jul 18)
- Re: ACSM-No Memory: queue_add! Marc Norton (Jul 18)