Snort mailing list archives
Re: Memory Usage - and eth2 Interface not monitored ?
From: Erek Adams <erek () snort org>
Date: Wed, 13 Aug 2003 12:26:49 -0400 (EDT)
On Wed, 13 Aug 2003, Joerg Mertin wrote: [...snip...]
1. The Memory Usage of the snort-process exeeds 150Mbytes. WEll - it's quite much - as my lex-Itx system has 256Mbytes of memory only. Is that normal ?
Yep. spp_conversation and spp_portscan2 allocate a lot of memory by default. If you don't use those two, you'll cut down your memory consumption quite a bit. You might also want to look at the 'lowmem' config option.
2. When I configure the Interface eth2 (using the -i eth2), snort stops logging. Putting it back to eth0 brings the Logging entries again.
[...snip...]
eth2 - DHCP - Wan Interface - Dynamic IP Address, and Masquerading/NAT active
[...snip...] Dynamic in what way? If it's the WAN interface then you need to change HOME_NET to use the 'outside' IP and not the 10.x range. Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Memory Usage - and eth2 Interface not monitored ? Joerg Mertin (Aug 13)
- Re: Memory Usage - and eth2 Interface not monitored ? Erek Adams (Aug 13)
- Re: Memory Usage - and eth2 Interface not monitored ? Joerg Mertin (Aug 13)
- Re: Memory Usage - and eth2 Interface not monitored ? Erek Adams (Aug 13)
- Re: Memory Usage - and eth2 Interface not monitored ? Joerg Mertin (Aug 13)
- Re: Memory Usage - and eth2 Interface not monitored ? Joerg Mertin (Aug 13)
- Re: Memory Usage - and eth2 Interface not monitored ? Erek Adams (Aug 13)