Snort mailing list archives

Re: Errors building snort-inlne 2.8.2.1 with clamv preprocessor


From: Tomasz Kojm <tkojm () clamav net>
Date: Thu, 10 Jul 2008 18:34:15 +0200

On Thu, 10 Jul 2008 17:17:19 +0100
Nigel Horne <njh () bandsman co uk> wrote:

I guess this will be fixed in the next release of snort-inline because the
SVN version of snort-inline has this code (note that maxratio has been
commented out).

   /* set the limits */
   memset(&clam_limits, 0, sizeof(clam_limits));
   /* maximal number of files in archive */;
   clam_limits.maxfiles = 1000;
   /* maximal archived file size */
   clam_limits.maxfilesize = 10 * 1048576; /* 10 MB */
   /* maximal recursion level */
   clam_limits.maxreclevel = 5;
   /* maximal compression ratio */
   /* clam_limits.maxratio = 200;*/
   /* disable memory limit for bzip2 scanner */
   clam_limits.archivememlim = 0;

The above should also include the maxscansize limit (the most important
one, introduced in ClamAV 0.93), eg.:

clam_limits.maxscansize = 31457280; /* 30 MB */

-- 
   oo    .....         Tomasz Kojm <tkojm () clamav net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Thu Jul 10 18:29:53 CEST 2008

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: