newbie question

[Michael Fenski <fenski () prz tu-berlin de>]

Hi there.

I just started testing snort an got this error message:

snort: [!] WARNING: TCP stream reassembler, Server Bytes in Buffer >
Buffer Size (39272 > 25144)

What does that mean?
Well, I expect the packets which are monitored are too many or too
large. Something like that?
But how can it be fixed?

thanks

Michael



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users