[Snort-users] how enable icmp snort-220.127.116.11
jlay at ...13475...
Mon Jun 16 13:02:16 EDT 2014
On 2014-06-16 10:26, hernani wrote:
> i forgot error,
> WARNING: Stream5 ICMP misconfigured (policy 0).
> Jun 16 17:20:04 hernani snort: ERROR: Stream5 not properly
> configured... exiting
> Em 16-06-2014 17:07, hernani escreveu:
>> How can i enable icmp snort-18.104.22.168
>> i change
>> preprocessor stream5_global: track_tcp yes,
>> track_udp yes,
>> track_icmp no, ------> TRACK_ICMP YES, snort not start.
>> someone can help me?
>> hernani coelho
Per the docs:
NOTE: ICMP is currently untested, in minimal code form and is NOT ready
for use in production networks. It is not turned on by default.
Configuration for ICMP session tracking. Since there is no target
binding, there should be only one occurrence of the ICMP configuration.
- Preprocessor name: stream5_icmp
timeout <number (secs)> - Session timeout. The default is "30",
minimum is "1", and the maximum is
(approximately 1 day).
Add a corresponding stream5_icmp entry and see what happens.
More information about the Snort-users