Re: [Snort-inline-users] ALERTFLUSHSTREAM: adjusted base_seq.

[Will M. <wil...@gm...>]

Are you running in bridge or NAT mode?

Regards,

Will

On 7/27/05, Adrian Soogemackelyk <soo...@gm...> wrote:
> I have a snort-inline box with the Snort-inline-2.3.0-RC1.diff patched
> to it.  Recently, snort-inline runs a while and then it dies without
> any real indication why except I see about 60 "ALERTFLUSHSTREAM:
> adjusted base_seq" messages on the screen.  I looked at the code and
> this seems to be a stream4inline feature.  My preprocessor line in my
> conf file looks like this:
>=20
> preprocessor stream4: timeout 30, memcap 67108864,
> disable_evation_alerts, stream4linline, truncate
> preprocessor stream4_reassemble: clientonly, noalerts, ports 21 23 25
> 53 80 143 110 111
>=20
> Any clues what might be causing snort to die like that?
>=20
> -Adrian
>=20
>=20
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference & EXPO Septem=
ber
> 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
> Agile & Plan-Driven Development * Managing Projects & Teams * Testing & Q=
A
> Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>