Re: Snort dying

[Zakai Kinan <titanyen2000 () yahoo com>]

No, I do not have any cron jobs running on that box.  I think that it is a rule because the log says nothing.  It runs 
for several days with no problems.  It dies when it processes the most amount of packets.  The box has 4GB of memory.  
I am using version 2.8.4.1.  I will try turning off the SO rules.

Thanks,

--- On Mon, 2/8/10, Leon Ward <snort () rm-rf co uk> wrote:

> From: Leon Ward <snort () rm-rf co uk>
> Subject: Re: [Snort-users] Snort dying
> To: "Joel Esler" <jesler () sourcefire com>
> Cc: "Zakai Kinan" <titanyen2000 () yahoo com>, "Snort Users" <snort-users () lists sourceforge net>
> Date: Monday, February 8, 2010, 2:59 AM
> Have you got a Cron job setup?
>
>  -L
>
> > On 8 February 2010 00:15, Joel Esler <jesler () sourcefire com>
> wrote:
> > > What makes you think it's a rule?  What does the
> log say?
> > > --
> > > Joel Esler
> > > 302-223-5974
> > > Sent from my iPhone
> > >
> > > On Feb 7, 2010, at 5:05 PM, Zakai Kinan <titanyen2000 () yahoo com>
> wrote:
> > > > I have had snort running for a couple of
> months now.  It is stopping
> > > > from time to time and I can't figure out why.
>  It is probably due to
> > > > a rule.  The log is of no help.  Does anyone
> have a way to tell
> > > > which rule is causing the problem?
> > > >
> > > >
> > > > TIA,
> > > >
> > > >
> > > > Zak
> > > >
> > > >
> > > >
> > > >
> > > > ---
> > > > ---
> > > > ---
> ---------------------------------------------------------------------
> > > > The Planet: dedicated and managed hosting,
> cloud storage, colocation
> > > > Stay online with enterprise data centers and
> the best network in the
> > > > business
> > > > Choose flexible plans and management services
> without long-term
> > > > contracts
> > > > Personal 24x7 support from experience hosting
> pros just a phone call
> > > > away.
> > > > http://p.sf.net/sfu/theplanet-com
> _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users () lists sourceforge net
> > > > Go to this URL to change user options or
> unsubscribe:
> > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > Snort-users list archive:
> > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> ------------------------------------------------------------------------------
> > > The Planet: dedicated and managed hosting, cloud
> storage, colocation
> > > Stay online with enterprise data centers and the
> best network in the business
> > > Choose flexible plans and management services
> without long-term contracts
> > > Personal 24x7 support from experience hosting pros
> just a phone call away.
> > > http://p.sf.net/sfu/theplanet-com
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users


      

------------------------------------------------------------------------------
SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
http://p.sf.net/sfu/solaris-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users