Snort mailing list archives

snort inline timing out after about 65KB


From: Daniel Browning-Weber <weberdan () gmail com>
Date: Tue, 24 May 2011 14:13:29 -0400

I have an issue with Snort (both 2.8.6.1 and 2.9) in IPS mode.  Snort
stops processing packets after about 65,536 bytes have been sent out
on a connection.  Sometimes the connection will pause for 40-50
seconds and then resume.  Other times the connection will never
recover.


I've seen this even with a totally blank snort config file.

Is there some setting I need to change?

------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: