[Snort-devel] Error when running Snort++ 3.0.0-a2-177 on Ubuntu x86 systems: ERROR: invalid perf_monitor.max_file_size = 4.29497e+09

Russ rucombs at ...3461...
Sun Nov 15 13:03:33 EST 2015


Thanks Noah.  We did see this.  Not sure why the fix wasn't committed 
already.

You should be able to set that explicitly as a workaround.

Russ

On 11/15/15 10:01 AM, Noah Dietrich wrote:
>
> on x86 versions of Ubuntu 12 and 14, i get the following error when 
> running Snort++ 3.0.0-a2-177 with the default configuration and rule 
> file:
>
> ERROR: invalid perf_monitor.max_file_size = 4.29497e+09
>
> here is what i see:
>
> $ /opt/snort/bin/snort -c /opt/snort/etc/snort/snort.lua -R 
> /opt/snort/etc/snort/sample.rules
> --------------------------------------------------
> o")~   Snort++ 3.0.0-a2-177
> --------------------------------------------------
> Loading /opt/snort/etc/snort/snort.lua:
> file_id
> ftp_data
> ftp_server
> http_inspect
> telnet
> ssl
> perf_monitor
> ERROR: invalid perf_monitor.max_file_size = 4.29497e+09
> sip
> rpc_decode
> port_scan
> back_orifice
>
>         ...
>
> pcap DAQ configured to passive.
> FATAL: see prior 1 errors
> Fatal Error, Quitting..
> $
>
> Snort was compiled with all required and optional dependencies.  Exact 
> same installation steps do not cause this error on x64 systems.
> these are vmware esxi 3 virtual machines.
>
> Please let me know if you need any other information.
> thanks
>
> Noah Dietrich
>
>
> ------------------------------------------------------------------------------
>
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20151115/0e742101/attachment.html>


More information about the Snort-devel mailing list