Snort mailing list archives

Seeing "Caught Alrm-Signal" hourly. Any advice why?


From: "Andy Berryman" <aberryman () Cymtec com>
Date: Tue, 15 Jun 2010 16:50:14 -0500

I'm seeing this hourly on my snort machines. I can't figure out why it
started doing this with Snort 2.8.6 update. I'm sure it has something to
do with the way it was compiled, but I have no idea how we did it or if
it's something I need to look into. 

 

Snort isn't restarting, that I can tell. The PID is the same throughout
syslog. 

 

Thanks,

Andy Berryman

 

 


###############################################################################
This message from Cymtec Systems, Inc. contains confidential information and is solely for the use of the recipient(s) 
named above.  If you are not the intended recipient or an agent responsible for delivering it to the intended 
recipient, you are hereby notified that you have received this message in error and that any review, disclosure, 
copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message 
in error, please destroy it immediately and notify Cymtec Systems, Inc. by telephone at +1.314.993.8700 or by return 
e-mail.                    
###############################################################################
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: