Stream5 error

[Dave Corsello <snort-users () wintertreemedia com>]

I'm getting a number of S5 errors like the following:

   Session exceeded configured max bytes to queue 1048576 using 1050000
   bytes (client queue). xx.xx.xx.xx 13624 --> xx.xx.xx.xx 80 (0) :
   LWstate 0x9 LWFlags 0x6007


I typically have not seen this error.  I'm not sure when it started.  
I'm concerned because in each case, the source and destination IPs are 
identical to one another, and because in each case the address is a 
public address outside of my network.  Can someone help me to understand 
what's happening, and if correctable, what kinds of Snort configuration 
changes can correct this?

Thanks,
Dave

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!