Re: File Size Limit SNORT in Logging Mode

[Erek Adams <erek () snort org>]

On Wed, 26 Feb 2003, Wiley, Rob wrote:

> What's the file size limit for the binary packet logging mode only (not IDS
> mode).  SNORT I'm using is the 1.9.0 (Build 209) on a RH8smp box (256M ram/
> 36G disk space) and snort stops running at exactly 2G.
>
> OR
>
> What are the constraints (OS, OS parameters, Memory,etc.) that might be
> limiting me.

It's the OS or libpcap.

Make sure you have largefiles enabled, and that libpcap was built with
largefile support.  Otherwise 2G is all you'll ever get.

Check the archives [0] on that.  There was some discussion on it a while
back.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

[0]     http://marc.theaimsgroup.com/?l=snort-users&r=1&w=2


-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users