Re: Snort Win32 Process Stalling

[Erek Adams <erek () snort org>]

On Fri, 24 Jan 2003, Bryce Stenberg wrote:

>  I too had been running snort fine for some time. When I upgraded an NT4
> server to 1.9.0-ODBC-MySQL-WIN32 (Build 209) it ran OK for a week or so then
> consumed most of the CPU cycles and brought server to it's knees until snort
> was stopped. Sounds similar to Steven's experience. And I don't run it as a
> service, it just log to file and I only have about 5 rules looking for
> specific outgoing directory names. Needless to say Snort is not used now,
> but I'd be also interested in any tips to get it stable enough to run again
> (but can't afford to have this server breaking).

I find this really odd.  There are a fair number of folks using Snort on
Win32 systems and most of those are fairly stable for a Win32 system.
Granted, there aren't large numbers of folks running with ODBC, but there
are some.  One thing that I'd like to see is if the version [0] on
snort.org has the same problem.  Instead of having seperate installs, it's
a all in one which installs the version you select.

If it does, then maybe--just maybe, the problem lies in the ODBC
drivers/version that you are running.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


[0]     http://www.snort.org/dl/binaries/1.9.0/Snort-1.9.0-win32.exe


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users