Re: Snort instance crashes

["J. L. Cabral" <jelocabral () gmail com>]

Hi, I have this:

Version 2.9.0 (Build 68)
   ''''    By Martin Roesch & The Snort Team:
http://www.snort.org/snort/snort-team
           Copyright (C) 1998-2010 Sourcefire, Inc., et al.
           Using libpcap version 1.1.1
           Using PCRE version: 7.6 2008-01-28

Thanks in advance.

On Thu, Dec 30, 2010 at 10:39 AM, rmkml <rmkml () yahoo fr> wrote:
> Hi JL,
> what exactly snort v2.9.0.x version please?
> Regards
> Rmkml
>
>
> On Thu, 30 Dec 2010, J. L. Cabral wrote:
>
> > Dear, I have 2 Snort 2.9 instances running at the same time, one
> > sniffes on eth1 and the other on eth2.
> >
> > They both run OK for a certain period of time, and after that the
> > always the first instance crashes and I've just the second instance
> > up.
> >
> > What can be the cause of this crash and how can tell Snort to log this
> > error events in a log file, because under /var/log/snort there is not
> > a error log file ?????
> >
> > Thanks a lot
> >
> > JeLo
> >
> >
> > ------------------------------------------------------------------------------
> > Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> > to consolidate database storage, standardize their database environment,
> > and,
> > should the need arise, upgrade to a full multi-node Oracle RAC database
> > without downtime or disruption
> > http://p.sf.net/sfu/oracle-sfdevnl
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users