OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Snort-users] Snort inline : Flowbits error

lmarcillyaressi.fr
Date: Mon Jun 27 2005 - 09:28:15 CDT


Hi,

I work with snort_inline version 2.3.0-RC1 and I download the current rules on http://www.snort.org and convert it into snort_inline rules with snortconfig (http://www.shmoo.com/~bmc/software/snortconfig/)

When i try to run snort_inline, i've got the following error:

ERROR: FLOWBITS ERROR: The number of flowbit IDs in the current ruleset exceed the maximum number of IDs that are allowed

and snort_inline doesn't run.

I saw this article http://www.mcabee.org/lists/snort-users/Mar-05/msg00410.html but i can't update my version of snort because i'm using snort in inline mode.

Do you have any idea? Does a patch exist??

Thanks in advance!

lm.

-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users