Snort mailing list archives
Re: Snort terminates abnormally
From: Joel Esler <jesler () sourcefire com>
Date: Mon, 12 Mar 2012 11:59:02 -0400
Looks like another instance of Snort is already running when try and start it, or, the last instance of Snort isn't clearing it's lock properly. J On Mar 12, 2012, at 11:53 AM, Alejandro Cabrera Obed wrote:
Searching under /var/log, the unique fatal error I see is this: FATAL ERROR: Failed to Lock PID File "/var/run//snort_eth0.pid" for PID "2216" But I can't match this log withe the moment of termination....I will do this. 2012/3/12 Joel Esler <jesler () sourcefire com> It doesn't give you an error message? On Mon, Mar 12, 2012 at 11:15 AM, Alejandro Cabrera Obed <aco1967 () gmail com> wrote: Dear, I've installed Snort 2.9.2.1 in a Debian Lenny testing box, with the corresponding snort ruleset (2921). I start the instance: /usr/local/snort/bin/snort -D -u snort -g snort -c /usr/local/snort/etc/snort-eth0.conf -i eth0 and after a pair of hours, the Snort terminates and I don't know the problem. Also I put: config pcre_match_limit=1500 config pcre_match_limit_recursion=1000 but the same problem occurs. My testing hardware is an Intel Celeron 2.26 GHZ with 386 MB RAM. What could be the problem ??? Special thanks. Alejandro ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news! -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire -- Alejandro Cabrera Obed aco1967 () gmail com www.alejandrocabrera.com.ar ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort terminates abnormally Alejandro Cabrera Obed (Mar 12)
- Re: Snort terminates abnormally Joel Esler (Mar 12)
- Re: Snort terminates abnormally Alejandro Cabrera Obed (Mar 12)
- Re: Snort terminates abnormally Joel Esler (Mar 12)
- Re: Snort terminates abnormally Alejandro Cabrera Obed (Mar 13)
- Re: Snort terminates abnormally Joel Esler (Mar 13)
- Re: Snort terminates abnormally Alejandro Cabrera Obed (Mar 12)
- Re: Snort terminates abnormally Joel Esler (Mar 12)