RE: snort 2.3.0 on solaris 9 crash

["Miner, Jonathan W (CSC) (US SSA)" <jonathan.w.miner () baesystems com>]

Hans -

The quick fix is to either use a older version of Snort, or comment out the "sfportscan" lines in your "snort.conf" 
file.


-----Original Message-----
From:   snort-users-admin () lists sourceforge net on behalf of hans
Sent:   Wed 02/02/2005 03:33 PM
To:     snort-users () lists sourceforge net
Cc:     
Subject:        [Snort-users] snort 2.3.0 on solaris 9 crash


hi all 

as i already found in the archive, i can only approve, that snort
version 2.3.0 crashes on solaris 9 plattforms. 
my hw is a sun v240 with ultrasparc-3 proc.
therfore, interface are bge with 10/100/1000 
and bge2 is connected to a 100mbit cisco-switch with a monitor-port.

monitoring normal traffic snort runs several hours. 
for test-reasons i did run nessus against the snorting host.
( from an other sun-box ) 
running snort in a "while true do"-loop 
snort crashes and restarts abount 20 times in the first 
seconds of the nessus-job. 

yesterday i did install the latest 9-recommended patch&security 
cluster and recompile snort, as the kernel was old from 11/04, but 
the os-version has no effect on the problem. 
and the server is running absolutly stable. 


best regards 
hans 

-- 



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<<winmail.dat>>