[Snort-users] (snort_decoder) WARNING: IP dgm len > captured len!

Martin Roecker roecker at ...15003...
Tue Oct 12 09:07:55 EDT 2010


> since were running snort in version 2.9.0 packets with a
> bigger size than 1369 bytes are droped by snort. This happens
> when we run snort in inline mode using the ipq daq.

UPDATE: when I start snort with "--snaplen 1518" it is working
fine. Is it possible that the length calculated is wrong?

Martin





More information about the Snort-users mailing list