Re: S5: Session exceeded configured max bytes

[Jason Haar <Jason.Haar () trimble co nz>]

On 12/14/2009 11:25 AM, Joel Esler wrote:
> If this isn't happening very much, it might be just a "burst"/"freak
> occurrence".  If this happens a lot, I would up the max_queued_bytes
> in Stream5.  If you start dropping packets, you need more RAM.  (Or if
> you are dropping packets now).
Thanks

I've added a zero on the end but unfortunately now I'm seeing

S5: Session exceeded configured max segs to queue 2621 using 2621 segs

Mainly web downloads by the looks of it - should I increase
max_queued_segs too? Would x2 (ie 5242) be about right?

Thanks

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


------------------------------------------------------------------------------
Return on Information:
Google Enterprise Search pays you back
Get the facts.
http://p.sf.net/sfu/google-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users