Error when running Snort++ 3.0.0-a2-177 on Ubuntu x86 systems: ERROR: invalid perf_monitor.max_file_size = 4.29497e+09

Noah Dietrich <[email protected]>
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <CA+N0JEx6P8dvtnPMYzTaDEH6HSD39fYB835EQDszS6CVaVfnRg@mail.gmail.com>
on x86 versions of Ubuntu 12 and 14, i get the following error when
running Snort++ 3.0.0-a2-177 with the default configuration and rule file:

ERROR: invalid perf_monitor.max_file_size = 4.29497e+09

here is what i see:

$ /opt/snort/bin/snort -c /opt/snort/etc/snort/snort.lua -R
/opt/snort/etc/snort/sample.rules
--------------------------------------------------
o")~   Snort++ 3.0.0-a2-177
--------------------------------------------------
Loading /opt/snort/etc/snort/snort.lua:
file_id
ftp_data
ftp_server
http_inspect
telnet
ssl
perf_monitor
ERROR: invalid perf_monitor.max_file_size = 4.29497e+09
sip
rpc_decode
port_scan
back_orifice

        ...

pcap DAQ configured to passive.
FATAL: see prior 1 errors
Fatal Error, Quitting..
$

Snort was compiled with all required and optional dependencies.  Exact same
installation steps do not cause this error on x64 systems.
these are vmware esxi 3 virtual machines.

Please let me know if you need any other information.
thanks

Noah Dietrich

------------------------------------------------------------------------------

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.