snaplen has no effect on "ip dgm len > captured len"

[Nicolas Greneche <nicolas.greneche () univ-paris13 fr>]

Hi,

I run snort on a dummy interface (this interface is part of bridge 
configured to act as a hub).

Here is my command :

/usr/local/compiled/snort/bin/snort -vd -i dummy0 -c 
/usr/local/etc/snort/snort.conf --snaplen XXX-D

Even with large snaplen values, I have this message in logs :

"ip dgm len > captured len"

from snort_decoder.

Someone has a clue of what's wrong ?

-- 
Nicolas Grenèche

Old blog : http://blog.etcshadow.fr
New blog : http://nsm.etcshadow.fr
Tel : 01 49 40 40 35
Fax : 01 48 22 81 50

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!