Re: oversize_chunk_encoding

[chris ryan <chris.ryan () gmx de>]

Sascha Hintz schrieb:

> thank you for your email. 
> I have added the startup messages of the syslog

> problem is that the preprocessor only accepts the default
> server configuration.
As i can see from your attachement, that is not correct:

Jul  2 10:16:11 vis0400 snort[7920]:     DEFAULT SERVER CONFIG:
Jul  2 10:16:11 vis0400 snort[7920]:     SERVER: xx.xx.xx.xx

> Where are the HI-CLIENT Options ?
Its a new feature of recent snort versions, as described in:
http://www.snort.org/docs/snort_manual/2.8.2/snort_manual.pdf
at 2.2.

I guess it's easier for you to increase the "chunk_encoding" of your
server profile to a greater value than 500000...

bye, Chris.



-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users