Re: Snort dying

[Alex Kirk <akirk () sourcefire com>]

Generally speaking, if a rule is going to cause a problem, it will do so on
startup, not intermittently during use.

What exactly are the logs saying that are "of no help"? Perhaps someone here
on this list can interpret the messages in the logs better than you can.
Also, what version of Snort are you running?

On Sun, Feb 7, 2010 at 5:05 PM, Zakai Kinan <titanyen2000 () yahoo com> wrote:

> I have had snort running for a couple of months now.  It is stopping from
> time to time and I can't figure out why.  It is probably due to a rule.  The
> log is of no help.  Does anyone have a way to tell which rule is causing the
> problem?
>
>
> TIA,
>
>
> Zak
>
>
>
>
>
> ------------------------------------------------------------------------------
> The Planet: dedicated and managed hosting, cloud storage, colocation
> Stay online with enterprise data centers and the best network in the
> business
> Choose flexible plans and management services without long-term contracts
> Personal 24x7 support from experience hosting pros just a phone call away.
> http://p.sf.net/sfu/theplanet-com
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-- 
Alex Kirk
AEGIS Program Lead
Sourcefire Vulnerability Research Team
+1-410-423-1937
alex.kirk () sourcefire com

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users