Re: NIC losts promisc. mode
"Scott Henson" wrote:
> Well I'm no expert, but Im thinking that snort is getting overloaded
> somehow. It is obviously not the NIC because both failed on that network
> segment. Maybe a computer on that segment is causeing the problems or
> configuration on that part of the network is causeing the process to die.
> Though I would first investigate snort.
thanks, good idea. i have just reviewed snort sources and discovered,that it
exits when error occured while reading interface.
now, i am thinking how to fix this problem. there is some reasons to do not
recompile from sources...
With best regards,