PDA

View Full Version : Are you running ClarkConnect 3.x ?


ultrabuzz
11-14-2005, 12:41 PM
Hey,

Since my upgrade to CC 3.1, I have been having some problems with Snort. After about a week after a reboot Snort process seems to hang causing dns errors on all the boxes behind it. I checked the logs but there is nothing indicating a failure in there. Machine runs just fine with proxy turned off.

Anyone else running CC with transparent proxy enabled that may have encountered similar issue ?

Digiital
11-14-2005, 01:35 PM
Have you tried to do a APT-GET UPDATE and grab the lastest SNORT? btw, I HATE Snort.

Here a copy of my sources.list file. (found in /etc/apt)

### Dag RPM Repository for Red Hat Enterprise Linux
rpm http://apt.sw.be redhat/el4/en/i386 dag
rpm http://apt.sw.be redhat/el3/en/i386 dag
rpm http://apt.sw.be redhat/el2.1/en/i386 dag
rpm [pcn] ftp://home-31:hiptop@apt.clarkconnect.com System os updates contribs developer
rpm [pcn] ftp://rhel-4:hiptop@rh.apt.clarkconnect.com System os updates

ultrabuzz
11-18-2005, 11:34 PM
Yes, updates were up-to-date.
Problem is now solved. Turned out to be a faulty ram stick.
Funny how it would run fine for a week then Snort would hang yet the rest of the machine was still usable .. :)