Snort
[Top] [All Lists]

Re: [Snort-users] problem with snort 2.6.1.1 (stop working)

To: "Julio E. Gonzalez P." <jegp@netvision.com.py>
Subject: Re: [Snort-users] problem with snort 2.6.1.1 (stop working)
From: "Justin Heath" <justin.heath@gmail.com>
Date: Thu, 23 Nov 2006 20:20:28 -0500
Cc: snort-users@lists.sourceforge.net
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <4565C6A0.6090901@netvision.com.py>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <4564DA46.1020304@snort.org> <4565A1BF.7080605@netvision.com.py> <351f7b8c0611230637ma46e93ds8a46e676deeafb5d@mail.gmail.com> <4565C6A0.6090901@netvision.com.py>
Sender: snort-users-bounces@lists.sourceforge.net
How long does it take before you see this issue? Is it possible to run
a tcpdump to get a packet trace during this time? If so can send the
packet trace to bugs@snort.org?

On 11/23/06, Julio E. Gonzalez P. <jegp@netvision.com.py> wrote:
> Just to reconfirm the problem, after some more tests.
> Snort 2.6.1.1 just stop working after some time running.
> I compile it two times, in CentOS 4.4, with this options: "./configure
> --enable-dynamicplugin" and "./configure --enable-dynamicplugin
> --enable-flexresp2". Both versions just stop from running after some
> time. Don't have any error or warning in the logs.
>
> Thanks for the help.
> Julio.
>
>
> Justin Heath wrote:
> > 2.6.1 is a known issue ... hence the release of 2.6.1.1. Please post
> > any more detail you can provide regarding 2.6.1.1 on Centos 4. I have
> > had a Centos 4 system running 2.6.1.1 (using the RHEL4 rpms) for about
> > 15 hours with no issues.
> >
> >
> > Cheers,
> > Justin
> >
> > On 11/23/06, Julio E. Gonzalez P. <jegp@netvision.com.py> wrote:
> >> I just download and tested snort 2.6.1.1 in a CentOS 4.4.
> >> It stop working after some time, just stop. No error or warning in logs,
> >> nothing more I can report, sorry. :(
> >> Snort 2.6.1 stops logging, and consumes all CPU.
> >> Snort 2.6.0.2 works OK.
> >>
> >> I hope you can find the bug.
> >> Julio.
> >>
> >>
> >> Snort Releases wrote:
> >> > Hi everybody,
> >> >
> >> > Snort v2.6.1.1 has been released.  The software and source code is
> >> > available at:
> >> >
> >> > http://www.snort.org/dl/
> >> >
> >> > Snort v2.6.1.1 corrects an resource usage issue exhibited in Snort
> >> > v2.6.1 in certain network environments.
> >> >
> >> > Happy Thanksgiving!
> >> >
> >> > The Snort Release Team
> >> > Sourcefire, Inc.
> >> >
> >> >
> >> >
> >> -------------------------------------------------------------------------
> >>
> >> > Take Surveys. Earn Cash. Influence the Future of IT
> >> > Join SourceForge.net's Techsay panel and you'll get the chance to
> >> share your
> >> > opinions on IT & business topics through brief surveys - and earn cash
> >> >
> >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> >>
> >> > _______________________________________________
> >> > Snort-users mailing list
> >> > Snort-users@lists.sourceforge.net
> >> > Go to this URL to change user options or unsubscribe:
> >> > https://lists.sourceforge.net/lists/listinfo/snort-users
> >> > Snort-users list archive:
> >> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >> >
> >> >
> >>
> >>
> >> -------------------------------------------------------------------------
> >>
> >> Take Surveys. Earn Cash. Influence the Future of IT
> >> Join SourceForge.net's Techsay panel and you'll get the chance to
> >> share your
> >> opinions on IT & business topics through brief surveys - and earn cash
> >> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> >>
> >> _______________________________________________
> >> Snort-users mailing list
> >> Snort-users@lists.sourceforge.net
> >> Go to this URL to change user options or unsubscribe:
> >> https://lists.sourceforge.net/lists/listinfo/snort-users
> >> Snort-users list archive:
> >> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >>
> >
>
>

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>