[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NIC losts promisc. mode



hi,

"Scott Henson" wrote:

> Well I'm no expert, but Im thinking that snort is getting overloaded
> somehow.  It is obviously not the NIC because both failed on that network
> segment.  Maybe a computer on that segment is causeing the problems or
some
> configuration on that part of the network is causeing the process to die.
> Though I would first investigate snort.
thanks, good idea. i have just reviewed snort sources and discovered,that it
exits when error occured while reading interface.
now, i am thinking how to fix this problem. there is some reasons to do not
recompile from sources...

With best regards,
                             Vladislav.



Reply to: