Snort mailing list archives
Re: snort error report
From: Edward Fjellskål <edwardfjellskaal () gmail com>
Date: Mon, 02 Apr 2012 08:44:51 +0200
On 04/02/2012 07:31 AM, Jagan Mohan Reddy D wrote:
I'm running snort on Ubuntu 10.04LTS. while running snort after some time the following error is displaying..... can any one help on this error...!
You need to configure the stream5 preprocessor. The default settings are not doing it for you :)
Read the snort manual. E
S5: Session exceeded configured max bytes to queue 1048576 using 1048660 bytes (server queue). 172.16.35.70 13578 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.34.239 50465 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.34.89 49284 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Pruned session from cache that was using 1225188 bytes (stale/timeout). 172.16.35.70 13578 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x216007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.35.45 64402 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.34.232 54422 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.35.150 53554 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.34.219 54537 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.35.70 13985 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.34.232 49248 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max bytes to queue 1048576 using 1048928 bytes (server queue). 172.16.34.34 57959 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x406007S5: Session exceeded configured max segs to queue 2621 using 2621 segs (server queue). 172.16.35.70 15829 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x6007S5: Session exceeded configured max bytes to queue 1048576 using 1048720 bytes (server queue). 172.16.34.199 49199 --> 172.16.100.201 22 (0) : LWstate 0x9 LWFlags 0x406007
------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort error report Jagan Mohan Reddy D (Apr 01)
- Re: snort error report Edward Fjellskål (Apr 01)