Snort mailing list archives

Re: Dump


From: Phil Wood <cpw () lanl gov>
Date: Wed, 18 Jul 2001 14:42:12 -0600

On Wed, Jul 18, 2001 at 02:48:37PM -0300, Robledo R. Aloisio wrote:

I am using snort 1.8 over netBSD 1.5. The snorts starts normally as a 
deamon, works perfectly for some hours when subtly it stops and generate a 
snort.core file. Anyone has an idea of what may be happening ?
Thanks a lot !

For starters: 

   0. Read the BUGS file.
   1. What does 'snort -V' say?
   2. What options do you use on the command line?
   3. What features have you selected in the configuration file (-c file)?
           (especially preprocessors)
   4. Have you compiled snort using the -g option so you could look at the
      core file with gdb?

      Try:

        # gdb yoursnort_program corefile

      and type:

        (gdb) bt

   5. What was the traffic like at the time of the core dump (?megabits/sec,
      ?packets/sec)?

   6. Are you on an Ethernet?  Or, what?



 >          Robledo R. Aloisio
 > Analista de Segurança de Redes
 >  GerĂȘncia de Informatica - BEG
 >
 >      Robledo R. Aloisio
 > Network Security Specialist
 >  State Bank of Goias-Brazil
 >    robledo () beg com br


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list

-- 
Phil Wood, cpw () lanl gov


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: