Re: snort 1.8.6 crashing when running two instances on the same interface with Openbsd

[Chris Green <cmg () sourcefire com>]

Jerome Magnin <jethro () ebat org> writes:

> Hi,
How much ram do you have? :-)
> my questions are:
>
> 1- is it possible to have a dump of _all_ the traffic and not just
> logged packets PLUS "real time" alerts with a single snort process?

put this as the last line in your snort.conf
log ip any any -> any any;

> 2- is my problem a known problem and if yes, what is the workaround
> if any?

> 3- is it a snort issue or an openbsd issue?

Looks like it's a need more memory issue.

-- 
Chris Green <cmg () sourcefire com>
Eschew obfuscation.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users