[Snort-users] Snort inline : Flowbits error

Martin Roesch roesch at ...1935...
Mon Jun 27 20:07:32 EDT 2005


Hi Im,

Upgrade to 2.3.3, we upgraded the number of bits available in that  
version...

      -Marty

On Jun 27, 2005, at 10:28 AM, lmarcilly at ...12243... wrote:

> Hi,
>
> I work with snort_inline version 2.3.0-RC1 and I download the  
> current rules on http://www.snort.org and convert it into  
> snort_inline rules with snortconfig (http://www.shmoo.com/~bmc/ 
> software/snortconfig/)
>
> When i try to run snort_inline, i've got the following error:
>
> ERROR: FLOWBITS ERROR: The number of flowbit IDs in the current  
> ruleset exceed the maximum number of IDs that are allowed
>
> and snort_inline doesn't run.
>
> I saw this article http://www.mcabee.org/lists/snort-users/Mar-05/ 
> msg00410.html but i can't update my version of snort because i'm  
> using snort in inline mode.
>
> Do you have any idea? Does a patch exist??
>
> Thanks in advance!
>
> lm.
>
>
>
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
> from IBM. Find simple to follow Roadmaps, straightforward articles,
> informative Webcasts and more! Get everything you need to get up to
> speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>

-- 
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Network Defense for the Real World - http:// 
www.sourcefire.com
Snort: Open Source Intrusion Detection and Prevention - http:// 
www.snort.org







More information about the Snort-users mailing list