logo       

Re: 2.6.0 mem bug or me?: msg#00013

security.ids.snort.devel

Subject: Re: 2.6.0 mem bug or me?

I assume there is something wrong with Snort, although i've heard
nothing about it. We have a machine with 2GB real memory and 1GB swap
(or maybe the other way around) that normally runs 7 Snort instances.
Under 2.4 we had no problems. with 2.6, some of the instances want up to
1,5GB memory. The Snort processes are constantly being killed. And to
any Snort developers who are reading, i set every single one of those
Snort instances to use the lowmem detection option. It doesn't help.

-&

Earl wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> All,
>
> OpenSource snort 2.6.0
> OS: Fedora CORE3
> Mem: up to 1GB
> Swap: 512MB
> Problem: Upload latest VRT rules, restart snort (stop/start, not
> HUP)
> produces this error:
> Aug 21 15:07:51 localhost kernel: Out of Memory: Killed process
> ##### (snort-plain)
>
> Although above appears in logs, it does actually *appear* to
> startup. Is this a know snort issue, perhaps a FC ulimit tweak
> issue, or am I the only one seeing this?
>
> I've heard 2.6.1 is soon to be released. Any idea when?
>
> Thanks.
>
> Earl
> -----BEGIN PGP SIGNATURE-----
> Note: This signature can be verified at https://www.hushtools.com/verify
> Version: Hush 2.5
>
> wkYEARECAAYFAkTp8soACgkQk7+e+4lPSm2FZgCgtzJWcRH0wlhkjuQGol/6C0eyIc8A
> nR7/kEGOrjhI3GptmBBQTGjJjOA4
> =QDu9
> -----END PGP SIGNATURE-----
>
>
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Snort-devel mailing list
> Snort-devel@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/snort-devel

--
GPG key / Schlüssel -- http://simultan.dyndns.org/~arjones/gpgkey.txt
Encrypt everything. / Alles verschlüsseln.


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-devel mailing list
Snort-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/snort-devel
<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise