Re: Snort dies after a few days.

[Emilio Mira <emial () alumni uv es>]

I'm currently using kernel 2.4.18 and updated libpcap to 0.7.1 (last
version if I'm not wrong) cause problems with ATM.

In any case I'll try to get more info with a debugging-enabled snort.

Regards.

On Mon, 25 Mar 2002, Phil Wood wrote:

> There has been a discussion on the tcpdump.org list that indicates that RH 7.2
> is broken in regards to libpcap and packet timestamps.  You might want to
> upgrade your kernel to 2.4.18 (www.kernel.org).
>
> [not for the uninitiated.]
>
> PS: If you make sure that your snort environment is providing "core" dumps,
>
>       prompt: ulimit -c 10000000
>     
>     prior to starting snort, and you have a snort compiled with '-g', then
>     you could send information to the list that would be helpful.  See:
>
>       BUGS
>
> Later, 
-- 
Emilio Mira
e-mail:         emial () alumni uv es


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users