Whenever I try to start Snort, I see this in my system logs:
snort[23839]: FATAL ERROR: /usr/pbi/snort-i386/etc/snort/snort_51513_em0/snort.conf(414) => Value specified for memcap is out of bounds. Please specify an integer between 1 and 4095.
And, sure enough, snort fails to start. This appears to be a mismatch between the GUI and the version of Snort installed - the GUI thinks the value need to be converted from MB to bytes, whereas the Snort binary appears to want megabytes. I think. Turning AppID off makes the problem go away.
Am I doing something wrong, or is this a bug? -- -Adam Thompson [email protected] +1 (204) 291-7950 - cell +1 (204) 489-6515 - fax _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
