Snort mailing list archives

Re: 2GB limit?


From: Javier Liendo <javier () liendo net>
Date: Thu, 9 Jan 2003 11:32:39 -0800 (PST)

hello

because of the configuration you mentionend you are
using the ext3 filesystem and afaik that's a limit
imposed by the filesystem iteself: no file can be
bigger than 2GB. i used to have a hogwash process that
crashed everytime the log file grew more than 2GB
long...hope it helps...

saludos

javier

--- Sammy X <sammy7887 () yahoo com> wrote:

Has anyone else run into any problems where logging
in tcpdump format stops once the log file reaches
2GB?  I'm using Snort 1.8.6 (Build 105) on a Redhat
7.2 box with kernel 2.4.7-10.  My libpcap is the one
the came with Redhat (0.6.2-9).  From what I've read
so far, it looks like the problem is with libpcap
not having been compiled with LFS.  Any
thoughts/suggestions?  Any help is greatly
appreciated!  Thanks in advance.

Sammy



---------------------------------
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: