Re: [Snort-users] FATAL ERROR: FLOWBITS ERROR: The number of

--=-6b+nQI/kC2/NG5IR+8rz
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Fri, 2005-04-22 at 14:21 +1200, Russell Fulton wrote:
> Hi, This afternoon after updating my bleeding rules I got the above
> error when restarting snort with the new rules.
>=20
> I am using most of the standard snort rules and a lot of the bleeding
> rules too.
>=20
> I guess this means that there is a limit to the number of Flowbit rules
> one can load at any time and that I have just exceeded it.

Yo Russell,

use the following directive in your snort.conf:

config flowbits_size: 256

I believe the default is 32 or 64, so anything larger than that should
help you out.

Cheers,
Frank


--=-6b+nQI/kC2/NG5IR+8rz
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQBCaG1fwBQKb2zelzoRAg4VAKDjPjgPlIkN5TIWJASIZT S9O56W6ACguEKM
T6dAsj3helrqJVAFx1m6OLs=
=7HjB
-----END PGP SIGNATURE-----

--=-6b+nQI/kC2/NG5IR+8rz--



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users