[Snort-users] Intermittent syslog error

Ralf Hildebrandt Ralf.Hildebrandt at ...821...
Tue Jun 26 04:09:51 EDT 2001

On Mon, Jun 25, 2001 at 04:16:01PM -0700, Gregory Mingus wrote:

> Jun 25 16:05:28 gw snort: [!] WARNING: TCP stream reassembler, Server Bytes
> in Buffer > Buffer Size (31329 > 26520)

The tcp stream reassemble plugin can't reassemble the stream, since
there are 31329 bytes, but the buffer it uses is only 26520 bytes big.
Increase the buffer size!

ralf.hildebrandt at ...821...                            innominate AG
Technical Consultant                   Don't be afraid of what you see -
Diplom-Informatiker                     be afraid of what you don't see!
tel: +49.(0)7000.POSTFIX                        fax: +49.(0)30.308806-77

More information about the Snort-users mailing list