Snort mailing list archives
Re: FreeBSD / snort / DEMARC / MySQL
From: Phil Wood <cpw () lanl gov>
Date: Fri, 15 Feb 2002 13:35:58 -0700
On Fri, Feb 15, 2002 at 12:35:41PM -0700, Fontenot, Paul wrote:
I have a FreeBSD 4.5-stable server running snort, demarc, mysql. I recently added a second nic to be run without an ip. Fine, done deal. tcpdump -i xl1 shows the network traffic flowing passed the monitoring port, however... snort -i xl1 stops all networking on the box after 2~4 seconds.
When that happens try the equivalent of: strace -p (snorts pid) See if it is hanging on an non network interface read. I had that happen when my mysqal was full up.
Any ideas? -paul _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Phil Wood, cpw () lanl gov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- FreeBSD / snort / DEMARC / MySQL Fontenot, Paul (Feb 15)
- Re: FreeBSD / snort / DEMARC / MySQL Phil Wood (Feb 15)
- <Possible follow-ups>
- RE: FreeBSD / snort / DEMARC / MySQL Wirth, Jeff (Feb 15)