Snort mailing list archives
Re: snort 2.8.2.1 stops logging after 1 minute...
From: "Frank Reid" <fcreid () ourcorner org>
Date: Mon, 21 Jul 2008 19:30:19 -1000
That's fantastic news, Craig! Steve, how did you isolate it to the PCRE parsing logic? In any case, thanks for tracking it down. Frank -----Original Message----- From: snort-users-bounces () lists sourceforge net [mailto:snort-users-bounces () lists sourceforge net] On Behalf Of craig Sent: Monday, July 21, 2008 7:14 PM To: snort-users Subject: Re: [Snort-users] snort 2.8.2.1 stops logging after 1 minute... On Mon, 2008-07-21 at 17:59 -1000, Frank Reid wrote:
I'm out of the area for a week or so, but would appreciate anyone's
feedback
on whether this addresses the issues we've been seeing. Frank
I have been testing it on a sensor for about 8 hours now and the sensor is still happily logging. I would tentatively say it fixed the issue. Thanks Steve!
-----Original Message----- From: snort-users-bounces () lists sourceforge net [mailto:snort-users-bounces () lists sourceforge net] On Behalf Of craig Sent: Monday, July 21, 2008 11:52 AM To: snort-users Subject: Re: [Snort-users] snort 2.8.2.1 stops logging after 1 minute... On Mon, 2008-07-21 at 16:31 -0400, Steven Sturges wrote:Attached is a patch to 2.8.2.1 that should address the issue. If anyone has problems with it, please let us know.testing it out now. Thanks Steve.
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: snort 2.8.2.1 stops logging after 1 minute..., (continued)
- Re: snort 2.8.2.1 stops logging after 1 minute... Frank Reid (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... JJ Cummings (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... JJ Cummings (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... Matt Jonkman (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... JJ Cummings (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... Tim Maletic (Jul 17)
- Re: snort 2.8.2.1 stops logging after 1 minute... Steven Sturges (Jul 21)
- Re: snort 2.8.2.1 stops logging after 1 minute... craig (Jul 21)
- Re: snort 2.8.2.1 stops logging after 1 minute... Frank Reid (Jul 21)
- Re: snort 2.8.2.1 stops logging after 1 minute... craig (Jul 21)
- Re: snort 2.8.2.1 stops logging after 1 minute... Frank Reid (Jul 21)
- Re: snort 2.8.2.1 stops logging after 1 minute... craig (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... JJ Cummings (Jul 16)
- Re: snort 2.8.2.1 stops logging after 1 minute... craig (Jul 16)