Re: Snort dies after a few days.

[Scott Nursten <scott.nursten () quadriga com>]

Hi there, 

Signal 15 is a SIGTERM and is the default for the 'kill' command.

To me, that means there is a good chance it was killed. Anyone on the list
care to confirm that if snort dies, it will log something different to
this??? If it dies on it's own, it shouldn't log signal 15 - should it?

Regards,

Scott 


On 25/3/02 8:56 am, "Emilio Mira Alfaro" <emial () alumni uv es> wrote:

> I'm using snort 1.8.4-beta4 I compiled with mysql and flexresp
> support, libpcap 0.7.1, on RH 7.2 and it's listening from an ATM
> interface. It's running ok, but after a few days, it dies for some
> unknown reason. In /var/log/messages I get:
>
> Mar  24 10:40:57 abc snort: Snort received signal 15, exiting
> Mar  24 10:40:57 abc kernel: device atm0 left promiscuous mode
>
> I recently updated RH 6.2 to RH 7.2 and snort 1.8.2 to 1.8.4-beta4.
> When I worked with RH 6.2 and snort 1.8.2 I hadn't this problem.
>
> Any ideas?
>
> Thanks in advance.
>
> --
> Emilio Mira
> e-mail: emial () alumni uv es
>
>
>
>
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users