Re: disable frag3

[Azfar Hashmi <azfar.hashmi () cloudways com>]

> Let me ask the basic question first.  Why are you trying to disable
the frag3 preprocessor?

I have to do it for trouble-shooting purpose. Snort is crashing daily in
load times and I have checked that that time server receiving large
number of fragmented packets. If it stop crashing after disabling it
then i will enable it after increasing its hardware power.

On 12/19/2011 7:53 PM, Joel Esler wrote:
> On Dec 19, 2011, at 5:33 AM, Azfar Hashmi wrote:
>
> > I am trying to disable frag3 preprocessor but snort giving me an error
> > that "invalid frag3 global option (disabled)"
> >
> > What I am doing wrong.


------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!