RE: Snort Inline - ip_queue dies

["Slighter, Tim" <tslighter () itc nrcs usda gov>]

did you verify that the mod exists for ip_queue?  "lsmod | grep ip_queue" or
just "lsmod" ??  if not, what I did to work around that is add that part
into the inline script or the snortd script near the top...../sbin/modprobe
ip_queue




-----Original Message-----
From: Jochen Vogel [mailto:jvogel () it-sec de]
Sent: Monday, March 10, 2003 9:40 AM
To: snort-users () sourceforge net
Subject: AW: [Snort-users] Snort Inline - ip_queue dies


if i start snort not as daemon

/usr/local/bin/snort -d -v -c /etc/snort/snort.conf -Q -i ppp0 -l
/var/log/snort/Mar_10/

i get an "segmentation fault" at the same moment i get the ip_queue failure


> -----Ursprüngliche Nachricht-----
> Von: Jochen Vogel [mailto:jvogel () it-sec de]
> Gesendet: Montag, 10. März 2003 12:09
> An: snort-users () sourceforge net
> Betreff: [Snort-users] Snort Inline - ip_queue dies
>
>
> hi,
>
> i installed snort inline 1.9.0beta2
> 1.9.1 wouldn´t compile at the moment.
> ip_queue is a module started with the iptables script
>
> snort inline is working well, but sometimes i get the syslog
> "snolin kernel: ip_queue: peer 6329 died, resetting state and flushing
> queue"
> after this message the snort daemon doesn´t exist anymore.
>
> thx for help
> jo
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users