[Snort-devel] Stream4 woes ??

Chris Green cmg at ...402...
Tue Mar 11 07:14:12 EST 2003


"Lawrence Reed" <Lawrence.Reed at ...1489...> writes:

>>
>>bzero(stream_pkt->pkt, 2048); to line 3584 of spp_stream4.c and
>>running snort again.  If they all go away, it's packet loss. Try a
>>smaller ruleset, increasing your memcaps, or CVS HEAD.
>>
>>
> Please only use this as a test,  the only real solution is to not
> drop packets.

Just clearing up, the bzero is a kludge. The other 3 things are real
solutions to help avoid packet loss.
-- 
Chris Green <cmg at ...402...>
To err is human, to moo bovine.




More information about the Snort-devel mailing list