[Snort-users] snort exiting oddly..

Tremaine Lea Tremaine at ...2255...
Tue Jun 19 04:15:43 EDT 2001


Being relatively new to snort, I'm unsure what the information below is 
telling me.  All I know for sure is that at some point it stops logging to 
mysql...  I only noticed it when I had a portscan mailed to me by snort and 
the portscan wasn't showing in ACID.  Any ideas?


-*> Snort! <*-
Version 1.7
By Martin Roesch (roesch at ...66..., www.snort.org)
[!] WARNING: TCP stream reassembler, Server Bytes in Buffer > Buffer Size
(49701 > 48504)[!] WARNING: TCP stream reassembler, Server Bytes in Buffer >
Buffer Size (53632 > 48504)[!] WARNING: TCP stream reassembler, Server Bytes
in Buffer > Buffer Size (40844 > 22176)[!] WARNING: TCP stream reassembler,
Server Bytes in Buffer > Buffer Size (24460 > 22176)[!] WARNING: TCP stream
reassembler, Server Bytes in Buffer > Buffer Size (59409 > 48504)
Exiting...
database: Closing mysql connection to database "snort"


=============================================================================
== Snort received 1023705 packets and dropped 0(0.000%) packets

Breakdown by protocol:                Action Stats:
    TCP: 1055972    (103.152%)         ALERTS: 23
    UDP: 38716      (3.782%)          LOGGED: 23
   ICMP: 233        (0.023%)          PASSED: 0
    ARP: 1420       (0.139%)
   IPv6: 0          (0.000%)
    IPX: 0          (0.000%)
  OTHER: 0          (0.000%)
DISCARD: 0          (0.000%)
=============================================================================
== Fragmentation Stats:
Fragmented IP Packets: 0          (0.000%)
   Rebuilt IP Packets: 0
   Frag elements used: 0
Discarded(incomplete): 0
   Discarded(timeout): 0
=============================================================================
== TCP Stream Reassembly Stats:
   TCP Packets Used:      243689     (23.805%)
   Reconstructed Packets: 72636      (7.095%)
   Streams Reconstructed: 5194
=============================================================================
==

--
Tremaine Lea

Doing things the hard way.  Every time.

-------------------------------------------------------

-- 
Tremaine Lea

Doing things the hard way.  Every time.




More information about the Snort-users mailing list