Re: snort killed

[waldo kitty <wkitty42 () windstream net>]

On 8/2/2013 06:11, Abid Ayoub wrote:
> i got this message:
>
> [63074. 715096 ] out of memory:  kill process 2755 (snort ) score 492 or
> sacrifice child
> [63074. 715202 ] killed process 2755 (snort) total-vm:352024kB,
> anon-rss:113580kB, file-rss:2444kB

that is exactly the message i suspected you would have gotten... is that from a 
virtual machine setup?? you need to state that it is a virtual machine if it 
is... that is the major part of the environment...

> i think that there is no sufficient sapce to run continuously snort.
> So ,  i should extand the hard disk  and the problem will be solved ?

no, not hard disk... that's "non-executable 'memory'"... you need more physical 
memory for the system to execute in... put more RAM in the box or give the 
virtual machine enough RAM to operate properly without killing off programs...

> Regards,
> Abid
>
>
> 2013/8/2 Abid Ayoub <abid.ayoub () gmail com <mailto:abid.ayoub () gmail com>>
>
>     Hi,
>
>     i use Ubuntu-server 12.04 LTS. So what should i do to prevent this use of
>     ressources ?
>
>     Regards,
>     Abid
>
>
>     2013/8/1 waldo kitty <wkitty42 () windstream net <mailto:wkitty42 () windstream net>>
>
>         On 8/1/2013 03:32, Abid Ayoub wrote:
>          > Helllo,
>          >
>          >
>          > i have a problem with snort.
>          > When i run snort , and nothing happend for a while, i get on the
>         linux terminal
>          > "killed ", and snort is killed.
>          >
>          > So is that normal ? What should i do to maintain the snort proccess?
>
>         your descriptions sounds like your kernel is killing the snort
>         process... most
>         likely for using too many resources... what is your environment?



-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

------------------------------------------------------------------------------
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!