[8.910][ANSWERED] New SNORT

With the new snort being downloaded in full for every IPS update, will we receive a mail notification about snort restarting, so far today I have received 2 notifications?

Ian

Parents

0 William Warren over 13 years ago

ouchie wawa a full snort every time? That's going to hammer the bandwidth impaired.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 William Warren over 13 years ago

ouchie wawa a full snort every time? That's going to hammer the bandwidth impaired.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 RFCat_vk_01 over 13 years ago in reply to William Warren

Hi,
found an odd message in the IPS log.

Ian

2012:03:21-19:20:59 cats-kingdom snort[13372]: Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log
2012:03:21-19:20:59 cats-kingdom snort[13372]: FATAL ERROR: SetupDNP3(): The Stream preprocessor must be enabled.
2012:03:21-19:21:52 cats-kingdom snort[2767]: Enabling inline operation
2012:03:21-19:21:52 cats-kingdom snort[2767]: Running in IDS mode
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel