Project

General

Profile

Bug #2747

Snort ignores memcap settings

Added by Angel Torres about 7 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Snort
Target version:
Start date:
01/07/2013
Due date:
% Done:

100%

Estimated time:
Affected Version:
2.1
Affected Architecture:
All

Description

Snort is giving off many of these notifications in the system log:

snort[3825]: S5: Pruned 1 sessions from cache for memcap. 1 ssns remain. memcap: 104/8388608

Raising Max Queued Bytes or Max Queued Segs does not resolve this.

Was discussed in this thread but seems to have fallen off from notice.

http://forum.pfsense.org/index.php/topic,51810.msg277499.html

History

#1 Updated by Angel Torres almost 7 years ago

This can be closed. Issue resolved by BMeeks with Snort version 2.5.4

#2 Updated by Ermal Lu├ži about 6 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

Also available in: Atom PDF