Snort mailing list archives

Re: problem with snort 2.6.1.1 (stop working)


From: "Justin Heath" <justin.heath () gmail com>
Date: Thu, 23 Nov 2006 20:20:28 -0500

How long does it take before you see this issue? Is it possible to run
a tcpdump to get a packet trace during this time? If so can send the
packet trace to bugs () snort org?

On 11/23/06, Julio E. Gonzalez P. <jegp () netvision com py> wrote:
Just to reconfirm the problem, after some more tests.
Snort 2.6.1.1 just stop working after some time running.
I compile it two times, in CentOS 4.4, with this options: "./configure
--enable-dynamicplugin" and "./configure --enable-dynamicplugin
--enable-flexresp2". Both versions just stop from running after some
time. Don't have any error or warning in the logs.

Thanks for the help.
Julio.


Justin Heath wrote:
2.6.1 is a known issue ... hence the release of 2.6.1.1. Please post
any more detail you can provide regarding 2.6.1.1 on Centos 4. I have
had a Centos 4 system running 2.6.1.1 (using the RHEL4 rpms) for about
15 hours with no issues.


Cheers,
Justin

On 11/23/06, Julio E. Gonzalez P. <jegp () netvision com py> wrote:
I just download and tested snort 2.6.1.1 in a CentOS 4.4.
It stop working after some time, just stop. No error or warning in logs,
nothing more I can report, sorry. :(
Snort 2.6.1 stops logging, and consumes all CPU.
Snort 2.6.0.2 works OK.

I hope you can find the bug.
Julio.


Snort Releases wrote:
Hi everybody,

Snort v2.6.1.1 has been released.  The software and source code is
available at:

http://www.snort.org/dl/

Snort v2.6.1.1 corrects an resource usage issue exhibited in Snort
v2.6.1 in certain network environments.

Happy Thanksgiving!

The Snort Release Team
Sourcefire, Inc.



-------------------------------------------------------------------------

Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to
share your
opinions on IT & business topics through brief surveys - and earn cash

http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------------------------

Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to
share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: