Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 23 replies
  • Subscribers 2 subscribers
  • Views 25528 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[INFO-115] Snort restart today

thomas_brewster
Anyone else noticing multiple units getting snort restarts today (2014-11-17).
We've had three different UTMs report multiple snort restarts this morning.

[INFO-115] Snort not running - restarted
Snort not running - restarted

Also noticing some new IPS hits on one of these units;
(smtp) Attempted response buffer overflow: ???? chars

Regards,
Thomas


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Ross86
    Yeah I've been seeing them all day too, just seems to be when emailing office 365 users.


    Yep.

    The only workaround I've found thus far for the nuisance messages is to create an exception listing your internal mail server(s) as exceptions in IPS based on source of traffic.  Destination would be difficult to create exceptions for, as there are many servers that Microsoft uses to accept email on.

    Sophos Support has informed me that they've escalated the case.