Re: snort dies complaining of too many links

[Martin Roesch <roesch () sourcefire com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You might be out of inodes, have you thought about using one of  
Snort's other logging modes?

     -Marty

On May 24, 2006, at 1:54 AM, Hubert Edward kIYIMBA wrote:

> My snort IDS dies instantly with the following message log.
>
> May 23 15:34:19 localhost snort: Rule application order: - 
> >activation->dynamic->alert->pass->log
> May 23 15:34:19 localhost snort: Log directory = /var/log/snort May  
> 23 15:34:20 localhost snort: Snort initialization completed  
> successfully (pid=7800) May 23 15:34:30 localhost snort: FATAL  
> ERROR: OpenLogFile() => mkdir(/var/log/snort/137.165.202.188) log  
> directory: Too many links May 23 15:34:30 localhost kernel: device  
> eth0 left promiscuous mode
>
>
> Please help out
>
> HE
>
> Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and  
> 30+ countries) for 2¢/min or less.

- --
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFEdGdSqj0FAQQ3KOARAr3RAJ9cJjywXK5XDbCa5YLBOlQI+Bol4ACfQg7u
mcrKEaBXuM8z5DqCK7dbwLw=
=H5zJ
-----END PGP SIGNATURE-----


-------------------------------------------------------
All the advantages of Linux Managed Hosting--Without the Cost and Risk!
Fully trained technicians. The highest number of Red Hat certifications in
the hosting industry. Fanatical Support. Click to learn more
http://sel.as-us.falkag.net/sel?cmd=lnk&kid7521&bid$8729&dat1642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users