Re: Memory usage on Snort

[Scott Nursten <scott.nursten () StreetsOnline co uk>]

Yep, did so at the time. Didn't know if stream2 had been discontinued or not so I thought I would let the list know 
about the issues I'd seen. I also see hundreds of 000's of EVASIVE RST detections from stream4. I'd guess this is 
Windows clients and their poor implementation of the stack. Is there any way that I can get rid of this alert without 
geting rid of stream4? What exactly does the noinspect flag do? 

Rgds,

Scott 





"Andrew R. Baker" wrote:
> Easy solution, don't use stream2, use stream4 instead.  stream2 is known
> to have problems and all development on it has stopped.  Maybe i can
> convince Marty to let me remove it from the current codebase.
>
> -A

Scott Nursten - Systems Administrator
----------------------------------------------
ddi:   +44 (0) 1293 744 122
work:  +44 (0) 1293 402 040
fax:   +44 (0) 1293 402 050
email: scottn () streetsonline co uk
wwweb: http://www.streetsonline.co.uk
----------------------------------------------

                Any sufficiently advanced technology is indistinguishable from magic.
                                        Arthur C. Clarke

                Any technology distinguishable from magic is insufficiently advanced.
                         (Probably not) Arthur C. Clarke

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users