I was under the impression that any 32-bit system (x86 architecture) was
limited to the 2GB file size. Use logrotate or something to keep the file
sizes managable.

-----Original Message-----
From: Javier Liendo [mailto:javierliendo.net]
Sent: Thursday, January 09, 2003 2:33 PM
To: Sammy X; snort-userslists.sourceforge.net
Subject: Re: [Snort-users] 2GB limit?

hello

because of the configuration you mentionend you are
using the ext3 filesystem and afaik that's a limit
imposed by the filesystem iteself: no file can be
bigger than 2GB. i used to have a hogwash process that
crashed everytime the log file grew more than 2GB
long...hope it helps...

saludos

javier

--- Sammy X <sammy7887yahoo.com> wrote:
>
> Has anyone else run into any problems where logging
> in tcpdump format stops once the log file reaches
> 2GB? I'm using Snort 1.8.6 (Build 105) on a Redhat
> 7.2 box with kernel 2.4.7-10. My libpcap is the one
> the came with Redhat (0.6.2-9). From what I've read
> so far, it looks like the problem is with libpcap
> not having been compiled with LFS. Any
> thoughts/suggestions? Any help is greatly
> appreciated! Thanks in advance.
>
> Sammy
>
>
>
> ---------------------------------
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now

-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com _______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

..
.

-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]