Snort
[Top] [All Lists]

[Snort-users] Snort 2.6.1 Stops Logging

To: snort-users@lists.sourceforge.net
Subject: [Snort-users] Snort 2.6.1 Stops Logging
From: "Colin Grady" <colin.grady@gmail.com>
Date: Tue, 21 Nov 2006 14:20:01 -0600
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
Sender: snort-users-bounces@lists.sourceforge.net
I've migrated one system from Snort 2.6.0.2 to Snort 2.6.1. I've made no configuration file changes and no command-line changes between the two releases, but after somewhere around 20-30 minutes after being started Snort 2.6.1 seems to stop logging data. I'm using unified logging, which is being processed through Barnyard. The Snort process continues to run and the processor time continues to climb, but the unified logs stop growing -- so it's not related to Barnyard as best as I can tell.

Anyone else seen anything like this?

Thanks,
Colin Grady
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
<Prev in Thread] Current Thread [Next in Thread>