Snort core dumped ( promiscuous mode disabled )



  • snort did not alert anymore
    when restart snort service… only in few minute  the interface bge0 will turn to promiscuous mode disabled

    Dec 20 17:15:34 	kernel: bge0: promiscuous mode disabled
    Dec 20 17:15:34 	kernel: pid 2082 (snort), uid 0: exited on signal 11 (core dumped)
    Dec 20 17:12:12 	snort[2082]: Not Using PCAP_FRAMES
    Dec 20 17:12:12 	snort[2082]: Not Using PCAP_FRAMES
    Dec 20 17:12:12 	snort[2082]: Snort initialization completed successfully (pid=2082)
    Dec 20 17:12:12 	snort[2082]: Snort initialization completed successfully (pid=2082)
    Dec 20 17:11:47 	SnortStartup[2128]: Ram free BEFORE starting Snort: 922M -- Ram free AFTER starting Snort: 796M -- Mode ac -- Snort memory usage:
    Dec 20 17:11:30 	snort2c[2085]: snort2c running in daemon mode pid: 2085
    

    installed pakage = snort + imspector + nmap

    $ uname -a
    FreeBSD firewall.XXXXXXX.com.my 6.1-RELEASE-p10 FreeBSD 6.1-RELEASE-p10 #0: Sun Oct 29 01:06:20 UTC 2006    sullrich@builder.livebsd.com:/usr/obj.pfSense/usr/src/sys/pfSense.6  i386

    version = 1.0.1  built on Sun Oct 29 01:07:16 UTC 2006

    also using PPTP ..

    hope this information will help all of u to solve my problem




Locked