Snort overload maximum states in 30 sec normal ?



  • anyone know how to fix it
    i've tried 10000 et 25000



  • exemple of my states logs…

    udp  192.168.0.1:29369 -> 192.168.0.1:53  MULTIPLE:MULTIPLE 
    udp 192.168.0.1:53 <- 192.168.0.1:29369
    udp  192.168.0.1:29369 -> 192.168.0.1:53  SINGLE:NO_TRAFFIC 
    udp 192.168.0.1:53 <- 192.168.0.1:21070 NO_TRAFFIC:SINGLE


Locked