Snort mailing list archives
Re: FATAL Error spp_session.c
From: "Joel Esler \(jesler\) via Snort-users" <snort-users () lists snort org>
Date: Wed, 10 Jul 2019 15:33:20 +0000
I did not.
On Jul 10, 2019, at 12:56 AM, macpower--- via Snort-users <snort-users () lists snort org> wrote: Did you get my text ? Sent from my iPhoneOn Jul 9, 2019, at 7:11 PM, Jefferson, Shawn <Shawn.Jefferson () bcferries com <mailto:Shawn.Jefferson () bcferries com>> wrote: Hi, We are running Snort 2.9.8.3 and using pulledpork to update the rules and send a HUP to the snort process(es). On a few of our sensors we are getting an error message when snort tries to reload: FATAL ERROR: spp_session.c(3517) Session configuration included in non-default policy Snort starts fine though, it's just on a reload that this can happen (and not all the time either) and it causes the snort process to stop. We are using config binding as well. Anyone run into this, or know what might be causing this error? Thanks Shawn <winmail.dat> _______________________________________________ Snort-users mailing list Snort-users () lists snort org <mailto:Snort-users () lists snort org> Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users <https://lists.snort.org/mailman/listinfo/snort-users> To unsubscribe, send an email to: snort-users-leave () lists snort org <mailto:snort-users-leave () lists snort org> Please visit http://blog.snort.org <http://blog.snort.org/> to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette <https://snort.org/faq/what-is-the-mailing-list-etiquette>_______________________________________________ Snort-users mailing list Snort-users () lists snort org <mailto:Snort-users () lists snort org> Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users <https://lists.snort.org/mailman/listinfo/snort-users> To unsubscribe, send an email to: snort-users-leave () lists snort org <mailto:snort-users-leave () lists snort org> Please visit http://blog.snort.org <http://blog.snort.org/> to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette <https://snort.org/faq/what-is-the-mailing-list-etiquette>
Attachment:
smime.p7s
Description:
_______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: snort-users-leave () lists snort org Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
Current thread:
- FATAL Error spp_session.c Jefferson, Shawn (Jul 09)
- Re: FATAL Error spp_session.c macpower--- via Snort-users (Jul 09)
- Re: FATAL Error spp_session.c Joel Esler (jesler) via Snort-users (Jul 10)
- <Possible follow-ups>
- Re: FATAL Error spp_session.c Al Lewis (allewi) via Snort-users (Jul 09)
- Re: FATAL Error spp_session.c macpower--- via Snort-users (Jul 09)