[Snort-users] Stream5 noisy syslog...

Nicholas Mavis (nmavis) nmavis at ...589...
Mon Jan 13 13:59:06 EST 2014


Jeff,

What version of Snort are you using? This was a bug that to my knowledge
is resolved in snort 2.9.5 build 94.

Nick

On 1/10/14 10:38 AM, "Jeff Kell" <jeff-kell at ...6282...> wrote:

>Is there a way to suppress the stream5 "S5: Pruned session from cache
>that was using 675 bytes..." and "S5: Session exceeded configured max
>bytes to queue..." messages to syslog?
>
>It appeared from the stream5 README that adding "prune_log_max 0" would
>disable the logging, but appears to be doing the opposite... appears I'm
>getting more logging.
>
>Jeff
>
>
>--------------------------------------------------------------------------
>----
>CenturyLink Cloud: The Leader in Enterprise Cloud Services.
>Learn Why More Businesses Are Choosing CenturyLink Cloud For
>Critical Workloads, Development Environments & Everything In Between.
>Get a Quote or Start a Free Trial Today.
>http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clkt
>rk
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
>Please visit http://blog.snort.org to stay current on all the latest
>Snort news!





More information about the Snort-users mailing list