Snort mailing list archives

Re: [HELP] snort stop processing on "Initializing rule chains" issue


From: Joel Esler <joel.esler () sourcefire com>
Date: Thu, 27 Dec 2007 07:38:50 -0500

That's not alot of RAM. I might suggest you get more RAM. Especially if you want to run a lot of rules.

However, I suggest you post your snort.conf somewhere so someone can help you fix it.

Joel

On Dec 27, 2007, at 2:01 AM, Rachmat Hidayat Al-Anshar wrote:

Um, its an AMD Sempron with clock 1,6 GHz and 256 MB memory.
I've been waiting for almost 1 Hour..I get phissed, so I terminated
the process with ctrl+z on my keyboard.

What was happened?

----- Original Message ----
From: Joel Esler <joel.esler () sourcefire com>
To: Rachmat Hidayat Al-Anshar <rachmat_hidayat_02 () yahoo com>
Cc: snort <Snort-users () lists sourceforge net>
Sent: Wednesday, December 26, 2007 8:11:06 PM
Subject: Re: [Snort-users] [HELP] snort stop processing on "Initializing rule chains" issue

Use the ac-bnfa config option.

config search-method: ac-bnfa

(Put this in your snort.conf) then try and start Snort.)

What kind of box are you running Snort on (CPU/RAM?)? How long are you waiting?

Joel


On Dec 26, 2007, at 6:01 AM, Rachmat Hidayat Al-Anshar wrote:


Like the title above, my snort stop processing at the "initializing rule chains"
Whats happen?
How to solve this?


Thanks in advance
mat



Looking for last minute shopping deals? Find them fast with Yahoo! Search .-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



Looking for last minute shopping deals? Find them fast with Yahoo! Search.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: