WARNING: Not IPv4 datagram

"Michael Steele" <[email protected]> Wed, 24 Jul 2019 23:43:12 -0400
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <[email protected]>
This is a multipart message in MIME format.

--===============8362393057491027310==
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0012_01D54279.8FA37D30"
Content-Language: en-us

This is a multipart message in MIME format.

------=_NextPart_000_0012_01D54279.8FA37D30
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Started testing 2.9.14 and I'm getting the below on ALL my Windows boxes:

 

The snort.conf tested good.

 

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: IP dgm len > captured len

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: IP dgm len > captured len

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: IP dgm len > captured len

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

WARNING: No preprocessors configured for policy 0.

(snort_decoder) WARNING: Not IPv4 datagram

 

Reverting back to 2.9.13, and all is back to normal.

 

WINSNORT.com Management Team Member

--

********************************************************

*     Since 2002 ~~ Visit http://www.winsnort.com

*      ~~ FREE Windows installation Tutorials ~~

*              ~~ FREE Support Forums ~~

* Snort: Open Source Network IDS - http://www.snort.org

********************************************************


------=_NextPart_000_0012_01D54279.8FA37D30
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US =
link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>Started testing 2.9.14 =
and I&#8217;m getting the below on ALL my Windows =
boxes:<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>The snort.conf tested =
good&#8230;<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>WARNING: No =
preprocessors configured for policy 0.<o:p></o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>(snort_decoder) WARNING: =
Not IPv4 datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: IP dgm len &gt; =
captured len<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: IP dgm len &gt; =
captured len<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: IP dgm len &gt; =
captured len<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>WARNING: No preprocessors configured for policy =
0.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>(snort_decoder) WARNING: Not IPv4 =
datagram<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>Reverting back to =
2.9.13, and all is back to normal&#8230;<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>WINSNORT.com Management =
Team Member<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>--<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'color:#1F497D'>*************************************************=
*******<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>*&nbsp;&nbsp;&nbsp;&nbsp; Since 2002 ~~ Visit <a =
href=3D"http://www.winsnort.com">http://www.winsnort.com</a><o:p></o:p></=
span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ~~ FREE Windows =
installation Tutorials ~~<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'color:#1F497D'>*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ~~ FREE Support Forums =
~~<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>* Snort: Open Source Network IDS - <a =
href=3D"http://www.snort.org">http://www.snort.org</a><o:p></o:p></span><=
/p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'>*************************************************=
*******<o:p></o:p></span></p></div></body></html>
------=_NextPart_000_0012_01D54279.8FA37D30--


--===============8362393057491027310==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============8362393057491027310==--