[Snort-users] Intermittent syslog error

Ralf Hildebrandt Ralf.Hildebrandt at ...821...
Tue Jun 26 04:09:51 EDT 2001


On Mon, Jun 25, 2001 at 04:16:01PM -0700, Gregory Mingus wrote:

> Jun 25 16:05:28 gw snort: [!] WARNING: TCP stream reassembler, Server Bytes
> in Buffer > Buffer Size (31329 > 26520)

The tcp stream reassemble plugin can't reassemble the stream, since
there are 31329 bytes, but the buffer it uses is only 26520 bytes big.
Increase the buffer size!

-- 
ralf.hildebrandt at ...821...                            innominate AG
Technical Consultant                   Don't be afraid of what you see -
Diplom-Informatiker                     be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX                        fax: +49.(0)30.308806-77






More information about the Snort-users mailing list