LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 01-02-2006, 03:50 PM   #1
Palula
Member
 
Registered: May 2005
Location: Brazil
Distribution: Fedore Core 3
Posts: 138

Rep: Reputation: 15
Snort start problem...


Hi everybody.
I'm having a new poblem... This is what the screen dumps when I start Snort as a service (/etc/rc.d/init.d/snortd start)...

rmal per-cpu:
cpu 0 hot: low 6, high 18, batch 3
cpu 0 cold: low 0, high 6, batch 3
HighMem per-cpu: empty

Free pages: 256kB (0kB HighMem)
Active:233 inactive:12590 dirty:0 writeback:12284 unstable:0 free:64
slab:1666 mapped:277 pagetables:189
DMA free:64kB min:64kB low:128kB high:192kB active:0kB inactive:11228kB
present:16384kB
protections[]: 0 0 0
Normal free:192kB min:192kB low:384kB high:576kB active:932kB
inactive:39132kB present:49152kB
protections[]: 0 0 0
HighMem free:0kB min:128kB low:256kB high:384kB active:0kB inactive:0kB
present:0kB
protections[]: 0 0 0
DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB 0*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB
0*4096kB = 64kB
Normal: 0*4kB 0*8kB 4*16kB 0*32kB 0*64kB 1*128kB 0*256kB 0*512kB 0*1024kB
0*2048kB 0*4096kB = 192kB
HighMem: empty
Swap cache: add 16721, delete 4429, find 914/1239, race 0+0
Out of Memory: Killed process 2271 (sendmail).

And when I try to see the status of the service (snortd) by typing /etc/rc.d/init.d/snortd start, this message appears:
snort dead but subsys locked

Does anybody know how to solve this problem?
 
Old 01-02-2006, 06:44 PM   #2
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,289

Rep: Reputation: 378Reputation: 378Reputation: 378Reputation: 378
The dead but subsystem locked message means that the process terminated abnormally and didn't get a chance to clean up after itself. The other stuff looks like a kernel message dump, not like something from snort. In particular, it looks like the kernel ran out of free memory and had to start killing processes (sendmail -- maybe snort got killed earlier). Snort requires a fair amount of memory (about 30 MB resident on my FreeBSD system). How much memory does your system have and are you running a lot of memory heavy programs? What do free and top have to say about memory usage?
 
Old 01-05-2006, 10:09 PM   #3
Palula
Member
 
Registered: May 2005
Location: Brazil
Distribution: Fedore Core 3
Posts: 138

Original Poster
Rep: Reputation: 15
Here's what free shows:

Code:
             total       used       free     shared    buffers     cached
Mem:         61388      60644        744          0      15764      18528
-/+ buffers/cache:      26352      35036
Swap:       524152          0     524152
And here's what top shows:

Code:
top - 01:10:07 up 23 min,  1 user,  load average: 0.08, 0.12, 0.23
Tasks:  53 total,   1 running,  52 sleeping,   0 stopped,   0 zombie
Cpu(s):  1.0% us,  1.3% sy,  0.0% ni, 97.7% id,  0.0% wa,  0.0% hi,  0.0% si
Mem:     61388k total,    57584k used,     3804k free,    15656k buffers
Swap:   524152k total,       20k used,   524132k free,    15340k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 3266 root      17   0  2760  884 1560 R  1.3  1.4   0:00.14 top
 2293 root      16   0  3580  516 1264 S  0.3  0.8   0:03.37 nifd
 2580 root      16   0  5616 3144 2940 S  0.3  5.1   0:03.71 hald
 3205 root      16   0  7732 1964 3552 S  0.3  3.2   0:01.14 sshd
    1 root      16   0  3072  524 1308 S  0.0  0.9   0:01.71 init
    2 root      34  19     0    0    0 S  0.0  0.0   0:00.13 ksoftirqd/0
    3 root       5 -10     0    0    0 S  0.0  0.0   0:00.02 events/0
    4 root       5 -10     0    0    0 S  0.0  0.0   0:00.11 khelper
    5 root       5 -10     0    0    0 S  0.0  0.0   0:04.40 kblockd/0
    6 root      25   0     0    0    0 S  0.0  0.0   0:00.00 khubd
   24 root      20   0     0    0    0 S  0.0  0.0   0:00.00 pdflush
   25 root      15   0     0    0    0 S  0.0  0.0   0:00.21 pdflush
   27 root       7 -10     0    0    0 S  0.0  0.0   0:00.00 aio/0
   22 root      15   0     0    0    0 S  0.0  0.0   0:00.00 kapmd
   26 root      16   0     0    0    0 S  0.0  0.0   0:00.50 kswapd0
  103 root      23   0     0    0    0 S  0.0  0.0   0:00.00 kseriod
  173 root      15   0     0    0    0 S  0.0  0.0   0:02.48 kjournald
Hope you guys can help. :-)
Thanks!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Cannot get snort to start hywaydave23 Linux - Security 4 09-11-2005 08:28 AM
snort problem monroetech Linux - Security 3 12-05-2004 01:54 PM
Smoothwall 1.0 fixes5 - Snort won't start sgallo Linux - Networking 3 06-09-2003 07:46 AM
Snort won't start tarballedtux Linux - Security 6 10-26-2002 07:58 PM
I want to start Snort as a service/daemon Olusegun Linux - Software 3 10-15-2002 10:35 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:31 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration