<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Thanks Noah.  We did see this.  Not sure why the fix wasn't
    committed already.<br>
    <br>
    You should be able to set that explicitly as a workaround.<br>
    <br>
    Russ<br>
    <br>
    <div class="moz-cite-prefix">On 11/15/15 10:01 AM, Noah Dietrich
      wrote:<br>
    </div>
    <blockquote
cite="mid:CA+N0JEx6P8dvtnPMYzTaDEH6HSD39fYB835EQDszS6CVaVfnRg@...2500..."
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <div dir="ltr"><br style="font-size:12.8px">
        <div dir="ltr" style="font-size:12.8px">on x86 versions of
          Ubuntu 12 and 14, i get the following error when
          running Snort++ 3.0.0-a2-177 with the default configuration
          and rule file:
          <div><br>
          </div>
          <div>ERROR: invalid perf_monitor.max_file_size = 4.29497e+09</div>
          <div><br>
          </div>
          <div>here is what i see:<br>
            <div><br>
            </div>
            <div>
              <div>$ /opt/snort/bin/snort -c
                /opt/snort/etc/snort/snort.lua -R
                /opt/snort/etc/snort/sample.rules</div>
              <div>--------------------------------------------------</div>
              <div>o")~   Snort++ 3.0.0-a2-177</div>
              <div>--------------------------------------------------</div>
              <div>Loading /opt/snort/etc/snort/snort.lua:</div>
              <div><span style="white-space:pre-wrap">    </span>file_id</div>
              <div><span style="white-space:pre-wrap">    </span>ftp_data</div>
              <div><span style="white-space:pre-wrap">    </span>ftp_server</div>
              <div><span style="white-space:pre-wrap">    </span>http_inspect</div>
              <div><span style="white-space:pre-wrap">    </span>telnet</div>
              <div><span style="white-space:pre-wrap">    </span>ssl</div>
              <div><span style="white-space:pre-wrap">    </span>perf_monitor</div>
              <div>ERROR: invalid perf_monitor.max_file_size =
                4.29497e+09</div>
              <div><span style="white-space:pre-wrap">    </span>sip</div>
              <div><span style="white-space:pre-wrap">    </span>rpc_decode</div>
              <div><span style="white-space:pre-wrap">    </span>port_scan</div>
              <div><span style="white-space:pre-wrap">    </span>back_orifice</div>
            </div>
            <div><br>
            </div>
            <div>        ...</div>
            <div><br>
            </div>
            <div>
              <div>pcap DAQ configured to passive.</div>
              <div>FATAL: see prior 1 errors</div>
              <div>Fatal Error, Quitting..</div>
            </div>
            <div>$</div>
            <div><br>
            </div>
            <div>Snort was compiled with all required and optional
              dependencies.  Exact same installation steps do not cause
              this error on x64 systems.</div>
            <div>these are vmware esxi 3 virtual machines.</div>
            <div><br>
            </div>
            <div>Please let me know if you need any other information.</div>
            <div>thanks</div>
            <div><br>
            </div>
            <div>Noah Dietrich</div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">------------------------------------------------------------------------------
</pre>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Snort-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Snort-devel@lists.sourceforge.net">Snort-devel@lists.sourceforge.net</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/snort-devel">https://lists.sourceforge.net/lists/listinfo/snort-devel</a>
Archive:
<a class="moz-txt-link-freetext" href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel</a>

Please visit <a class="moz-txt-link-freetext" href="http://blog.snort.org">http://blog.snort.org</a> for the latest news about Snort!</pre>
    </blockquote>
    <br>
  </body>
</html>