Snort mailing list archives

Snort Heap Profiling using tcmalloc


From: Akshita Tyagi <akshita.msit () gmail com>
Date: Wed, 6 May 2015 15:29:49 -0600

Hi,

I was trying to perform snort heap profiling to study the memory leaks, if
any, in snort. I do not profile entire snort application, but a particular
running process.

I ran the following command:

LD_PRELOAD=/lib64/libtcmalloc.so.4.2.2 HEAPPROFILE=normal
/usr/local/snort/bin/snort -u _snort -g _snort -t /var/snort -Q -c
/var/snort/snort-drop.full-duplex.conf
--pid-path=/var/snort/run/ips/full-duplex/p2 -l
/var/snort/log/ips/full-duplex/p2 --daq nfq --daq-dir
/usr/local/snort/lib/daq --daq-mode inline --daq-var queue=2 --daq-var
queue_len=172 --daq-var mark=0x10

It gives me the following error:

ERROR: Can't initialize DAQ nfq (-1) - nfq_daq_initialize: nf queue
creation failed

I tried looking for the possible solutions on google, but I am still
uncertain how to resolve it. Could anyone tell why am I having this error,
and what are the possible ways to resolve it?

Thanks.
-- 
*Akshita Tyagi*
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: