Snort Warning: flowbits key



  • I am seeing a lot of snort Warning in the log ending with  but not ever checked why am i seeing these errors and how can i fix it thanks
    Feb 9 05:46:15 snort[8144]: 377 out of 512 flowbits in use.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'mssearch_file.request' is set but not ever checked.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'Backdoor.Apofis.Remotecontrol' is set but not ever checked.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'Backdoor.Apofis.Remotecontrol' is set but not ever checked.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'Netspy_Command_Pattern' is set but not ever checked.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'Netspy_Command_Pattern' is set but not ever checked.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'backup_file.request' is set but not ever checked.
    Feb 9 04:50:21 snort[1088]: Warning: flowbits key 'backup_file.request' is set but not ever checked.



  • Those are warnings, not errors (hence the tag "Warning").  You can ignore them, or remove the rules that set those flowbits.


Locked