Hey All!

So yea....I have two machines...both running Snort-2.4.0.  Both have:

preprocessor stream4_reassemble: both,ports [all]

in the config

Now...what's interesting is that one machine gives me:

snort[2159]: WARNING /etc/snort/snort.conf(375) => flush_behavior set in
config file, using old static flushpoints (0)

on restart, but the other does not.  Any way I can track down the
difference?  I've added flush_behavior large_window to the machine that
gave the above line and all is right in the cosmos now.  Was just
curious.

Both machines are running slackware 10.1 with snort compiled with no
compile options.

James


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
 ________________________________________
_______
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists...nfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf....ist=snort-users

[ Post a follow-up to this message ]