[Snort-users] Warning: flowbits key 'realplayer.playlist' is checked but not ever set.

Lance Boon lboon at ...11799...
Wed Aug 18 07:02:13 EDT 2004


I just upgraded one of my sensors to 2.2.0 from 2.1.3. When I issue the
command kill -SIGUSR1 pid, then tail var/log/messages I notice something
that I've never seen before. I see the following message "Warning:
flowbits key 'realplayer.playlist' is checked but not ever set." What
exactly is this referring to? Snort starts successfully and logs alerts
to my remote mysql server so I'm not sure if this is something to be
concerned about.

Part of the /var/log/messages after kill -SIGUSR1 pid

Aug 13 10:17:00 IDS1 snort: rpc_decode arguments:
Aug 13 10:17:00 IDS1 snort:     Ports to decode RPC on: 111 32771
Aug 13 10:17:00 IDS1 snort:     alert_fragments: INACTIVE
Aug 13 10:17:00 IDS1 snort:     alert_large_fragments: ACTIVE
Aug 13 10:17:00 IDS1 snort:     alert_incomplete: ACTIVE
Aug 13 10:17:00 IDS1 snort:     alert_multiple_requests: ACTIVE
Aug 13 10:17:00 IDS1 snort: telnet_decode arguments:
Aug 13 10:17:00 IDS1 snort:     Ports to decode telnet on: 21 23 25 119
Aug 13 10:17:01 IDS1 snort: Warning: flowbits key 'realplayer.playlist'
is checked but not ever set.
Aug 13 10:17:01 IDS1 snort: Snort initialization completed successfully

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3739 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040818/ed588424/attachment.bin>


More information about the Snort-users mailing list