Snort mailing list archives

Re: Snort inline : Flowbits error


From: Martin Roesch <roesch () sourcefire com>
Date: Mon, 27 Jun 2005 23:04:55 -0400

Hi Im,

Upgrade to 2.3.3, we upgraded the number of bits available in that version...

     -Marty

On Jun 27, 2005, at 10:28 AM, lmarcilly () aressi fr wrote:

Hi,

I work with snort_inline version 2.3.0-RC1 and I download the current rules on http://www.snort.org and convert it into snort_inline rules with snortconfig (http://www.shmoo.com/~bmc/ software/snortconfig/)

When i try to run snort_inline, i've got the following error:

ERROR: FLOWBITS ERROR: The number of flowbit IDs in the current ruleset exceed the maximum number of IDs that are allowed

and snort_inline doesn't run.

I saw this article http://www.mcabee.org/lists/snort-users/Mar-05/ msg00410.html but i can't update my version of snort because i'm using snort in inline mode.

Do you have any idea? Does a patch exist??

Thanks in advance!

lm.





-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



--
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Network Defense for the Real World - http:// www.sourcefire.com Snort: Open Source Intrusion Detection and Prevention - http:// www.snort.org





-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: