[Snort-devel] Error when running Snort++ 3.0.0-a2-177 on Ubuntu x86 systems: ERROR: invalid perf_monitor.max_file_size = 4.29497e+09

Noah Dietrich noah_dietrich at ...3622...
Sun Nov 15 10:01:05 EST 2015


on x86 versions of Ubuntu 12 and 14, i get the following error when
running Snort++ 3.0.0-a2-177 with the default configuration and rule file:

ERROR: invalid perf_monitor.max_file_size = 4.29497e+09

here is what i see:

$ /opt/snort/bin/snort -c /opt/snort/etc/snort/snort.lua -R
/opt/snort/etc/snort/sample.rules
--------------------------------------------------
o")~   Snort++ 3.0.0-a2-177
--------------------------------------------------
Loading /opt/snort/etc/snort/snort.lua:
file_id
ftp_data
ftp_server
http_inspect
telnet
ssl
perf_monitor
ERROR: invalid perf_monitor.max_file_size = 4.29497e+09
sip
rpc_decode
port_scan
back_orifice

        ...

pcap DAQ configured to passive.
FATAL: see prior 1 errors
Fatal Error, Quitting..
$

Snort was compiled with all required and optional dependencies.  Exact same
installation steps do not cause this error on x64 systems.
these are vmware esxi 3 virtual machines.

Please let me know if you need any other information.
thanks

Noah Dietrich
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20151115/db8b4284/attachment.html>


More information about the Snort-devel mailing list