Re: [HELP] snort stop processing on "Initializingrule chains" issue

["Arif Basha" <arif.basha () janes com>]

Is there a maximum though?  I mean, above certain point, Snort cannot
make use of the memory?  Like WinXP cannot see more than 4 GB of memory
in the system??

 

Thanks.
Arif

 

 

 

From: snort-users-bounces () lists sourceforge net
[mailto:snort-users-bounces () lists sourceforge net] On Behalf Of Joel
Esler
Sent: Friday, December 28, 2007 8:44 AM
To: Rachmat Hidayat Al-Anshar
Cc: snort
Subject: Re: [Snort-users] [HELP] snort stop processing on
"Initializingrule chains" issue

 

There is no minimum for Snort, the more memory you have for Snort, the
better it will run.


--

Joel Esler

joel.esler () sourcefire com

 





 

On Dec 28, 2007, at 2:43 AM, Rachmat Hidayat Al-Anshar wrote:





Lack of memory, I think so, I try the same set on my virtual LAN with my
lappie. Its about almost 1 GB of memory.
Ow.. I see clearly now, 

Now I am using 512 MB of RAM and Snort still stuck on the road...
after Not Using PCAP_FRAMES...

I also has change the "config detection" to "search-method ac-bnfa"
and the snort process still stuck.

so, how much minimum requirement of memory that snort needs?

Thanks 
Mat

 

________________________________

Looking for last minute shopping deals? Find them fast with Yahoo!
Search.
<http://us.rd.yahoo.com/evt=51734/*http:/tools.search.yahoo.com/newsearc
h/category.php?category=shopping>
------------------------------------------------------------------------
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_________________
______________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users