Snort mailing list archives
Re: Fwd: Snort 'hangs'
From: "Tom Peters (thopeter)" <thopeter () cisco com>
Date: Fri, 11 Apr 2014 21:22:22 +0000
Matheus,
Snort: s5: session exceeded configured max bytes to queue LWstate 0x1 LWFlags (have updated memcap to half the max @500MB)
This error message (which has segs and bytes versions) means a TCP connection exceeded the configured limit of unacked TCP data. It is common in environments where Snort is only seeing one direction of the connection. It does not mean you have a memory shortage. It probably also has nothing to do with your problem. I need more data to make any progress. Please send your Snort config and your logging output. You don't need to wait for a failure to send logs. What is the command line you use to start Snort? What configuration parameters did you use to build Snort? Do you use OpenAppID? How long have you had this problem? What changed or have you always had it? Tom
------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Fwd: Snort 'hangs' conma293 (Apr 08)
- Message not available
- Re: Fwd: Snort 'hangs' Matheus Condi'ez (Apr 09)
- Re: Fwd: Snort 'hangs' Matheus Condi'ez (Apr 09)
- Re: Fwd: Snort 'hangs' Y M (Apr 09)
- Re: Fwd: Snort 'hangs' Tom Peters (thopeter) (Apr 11)
- Message not available
- Re: Fwd: Snort 'hangs' Matheus Condi'ez (Apr 12)
- Message not available
- Re: Fwd: Snort 'hangs' Matheus Condi'ez (Apr 21)
- Message not available
- Message not available
- Fwd: Fwd: Snort 'hangs' Matheus Condi'ez (Apr 22)
- Re: Fwd: Snort 'hangs' Matheus Condi'ez (Apr 09)
- Message not available