Notes |
|
(0001094)
|
maikel
|
2009-02-10 13:22
|
|
Isnt packetfence already running snort 2.8 since 1.7(even 1.6.2) I runn 1.7 on a system with snort 2.8 already for more then a year without problems, except the custom pfdetect tail |
|
|
(0001095)
|
user4
|
2009-02-10 13:45
|
|
I am trying to use Snort 2.8 which is throwing ‘Cannot check flow connection for non-TCP traffic’ in the event logs. I looked up the reason for this error and 99% of the time the solution was an old snort.conf file.
Josh Moon |
|
|
(0001096)
|
user4
|
2009-02-10 13:46
|
|
The issue seems to go away when we use the settings in the default snort configuration file shipped with snort 2.8 |
|
|
(0001136)
|
maikel
|
2009-03-12 16:56
|
|
Actually thats because of the flow preprocessor. It should be replaced by stream5 for non tcp traffic. |
|
|
|
|