Re: Snort stopping after about 12 hours

[<controld () ghost transatlas com>]

Do you have any error messages to offer?
I've had snort die on me when the snort machine just had too little
horsepower for the amount of data that I was logging. In my rulesets I was
not checking the rulesets, but also logging port 25, 143 110 80 etc to a
log. Once removing some of those it stopped dying. Or, you could get a
bigger machine.

On Wed, 5 Dec 2001, Patrick S. Harper wrote:

> I have a snort box at a client that has snort running as a daemon.  It
> stops after about 12 hours of operation.  I was wondering if anyone had
> seen this before
>
>
> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Phil Wood
> Sent: Wednesday, December 05, 2001 9:26 AM
> To: Bhargavi Srivathsan.
> Cc: snort-users () lists sourceforge net
> Subject: Re: [Snort-users] (no subject)
>
>
> Why don't you go to the WIN32-Prj directory and look at some of the
> documents that explain how to use snort?  I don't do windows, but this
> looks like a good place to start.  (You get the source from
> www.snort.org.)
>
>   snort/win32/WIN32-Prj/snort.opt:    Microsoft Word document data
>   snort/win32/WIN32-Prj/snort.plg:    HTML document text
>
> On Tue, Dec 04, 2001 at 09:44:18PM -0800, Bhargavi Srivathsan. wrote:
> > hello,
> >   I am new to snort.I am working on a win 98 system.I have installed 
> > snort but i do not know how to make it run. Please help me.
> > Bye
> > Bhargavi
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Buy the perfect holiday gifts at Yahoo! Shopping. 
> > http://shopping.yahoo.com
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe: 
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive: 
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users