Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Snort-users] snort process getting killed

from [Joel Esler] Network Security [Permanent Link]
Subject: Re: [Snort-users] snort process getting killed
Date: Wed, 16 May 2007 09:56:56 -0400 
Add ac-bnfa to your testing of search methods.


On Wed, May 16, 2007 at 09:50:32AM -0400, it looks like doug schmidt sent me:

fwiw. I had rebooted the box yesterday, checking to see if recently
added memory was an issue. Upon reboot I forgot to plumb the IP'less
interface it was sniffing on.
Without plumbing the interface, I had tried all search methods with
same results.
Im going to try this again today with the interface plumbed.

(lowmem,acs,ac,ac-std,ac-banded,ac-sparsebands,mwm)

Found this info, but I do not get the mem error in messages. This is
what made me try the different methods.

http://osdir.com/ml/security.ids.snort.devel/2006-08/msg00014.html

Im going to try the different search methods again today.
Also, 2.6.1.5 was killed off at some point last night.

2.6.1.5 was running last night with no method specifically specified.

~doug

On 5/16/07, Joel Esler <joel.esler@sourcefire.com> wrote:

What search-method are you using, out of curiosity.  Did you tell us or 
have you not said yet.

j




-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users








+-----
joel esler | security consultant | Sourcefire | 
http://demo.sourcefire.com/jesler.pgp.key

Attachment: pgpVqt6JbWG8H.pgp
Description: PGP signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: [Snort-users] snort process getting killed, Joel Esler
Next by Date:  Re: [Snort-users] snort process getting killed, doug schmidt
Previous by Thread:  Re: [Snort-users] snort process getting killed, doug schmidt
Next by Thread:  Re: [Snort-users] snort process getting killed, doug schmidt
Indexes:  [Date] [Thread] [Top] [All Lists]