Interesting issue..

[James Lay <jlay () slave-tothe-box net>]

Hey All!

So yea....I have two machines...both running Snort-2.4.0.  Both have:

preprocessor stream4_reassemble: both,ports [all]

in the config

Now...what's interesting is that one machine gives me:

snort[2159]: WARNING /etc/snort/snort.conf(375) => flush_behavior set in
config file, using old static flushpoints (0) 

on restart, but the other does not.  Any way I can track down the
difference?  I've added flush_behavior large_window to the machine that
gave the above line and all is right in the cosmos now.  Was just
curious.

Both machines are running slackware 10.1 with snort compiled with no
compile options.

James


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users