Re: Error when running Snort++ 3.0.0-a2-177 on Ubuntu x86 systems: ERROR: invalid perf_monitor.max_file_size = 4.29497e+09
Russ <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <[email protected]> |
Thanks Noah. We did see this. Not sure why the fix wasn't committed already. You should be able to set that explicitly as a workaround. Russ On 11/15/15 10:01 AM, Noah Dietrich wrote: > > on x86 versions of Ubuntu 12 and 14, i get the following error when > running Snort++ 3.0.0-a2-177 with the default configuration and rule > file: > > ERROR: invalid perf_monitor.max_file_size = 4.29497e+09 > > here is what i see: > > $ /opt/snort/bin/snort -c /opt/snort/etc/snort/snort.lua -R > /opt/snort/etc/snort/sample.rules > -------------------------------------------------- > o")~ Snort++ 3.0.0-a2-177 > -------------------------------------------------- > Loading /opt/snort/etc/snort/snort.lua: > file_id > ftp_data > ftp_server > http_inspect > telnet > ssl > perf_monitor > ERROR: invalid perf_monitor.max_file_size = 4.29497e+09 > sip > rpc_decode > port_scan > back_orifice > > ... > > pcap DAQ configured to passive. > FATAL: see prior 1 errors > Fatal Error, Quitting.. > $ > > Snort was compiled with all required and optional dependencies. Exact > same installation steps do not cause this error on x64 systems. > these are vmware esxi 3 virtual machines. > > Please let me know if you need any other information. > thanks > > Noah Dietrich > > > ------------------------------------------------------------------------------ > > > _______________________________________________ > Snort-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/snort-devel > Archive: > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel > > Please visit http://blog.snort.org for the latest news about Snort! ------------------------------------------------------------------------------ _______________________________________________ Snort-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!