Re: Snort instance crashes

[Bhagya Bantwal <bbantwal () sourcefire com>]

Hello JL,

Do you have a core file for this crash? Also, can you please send us the
pcap and conf file that causes the core?

-B

On Thu, Dec 30, 2010 at 8:54 AM, J. L. Cabral <jelocabral () gmail com> wrote:

> Hi, I have this:
>
> Version 2.9.0 (Build 68)
>   ''''    By Martin Roesch & The Snort Team:
> http://www.snort.org/snort/snort-team
>           Copyright (C) 1998-2010 Sourcefire, Inc., et al.
>           Using libpcap version 1.1.1
>           Using PCRE version: 7.6 2008-01-28
>
> Thanks in advance.
>
> On Thu, Dec 30, 2010 at 10:39 AM, rmkml <rmkml () yahoo fr> wrote:
> > Hi JL,
> > what exactly snort v2.9.0.x version please?
> > Regards
> > Rmkml
> >
> >
> > On Thu, 30 Dec 2010, J. L. Cabral wrote:
> >
> > > Dear, I have 2 Snort 2.9 instances running at the same time, one
> > > sniffes on eth1 and the other on eth2.
> > >
> > > They both run OK for a certain period of time, and after that the
> > > always the first instance crashes and I've just the second instance
> > > up.
> > >
> > > What can be the cause of this crash and how can tell Snort to log this
> > > error events in a log file, because under /var/log/snort there is not
> > > a error log file ?????
> > >
> > > Thanks a lot
> > >
> > > JeLo
> ------------------------------------------------------------------------------
> > > Learn how Oracle Real Application Clusters (RAC) One Node allows
> customers
> > > to consolidate database storage, standardize their database environment,
> > > and,
> > > should the need arise, upgrade to a full multi-node Oracle RAC database
> > > without downtime or disruption
> > > http://p.sf.net/sfu/oracle-sfdevnl
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment,
> and,
> should the need arise, upgrade to a full multi-node Oracle RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users