Did things happen to get swapped around or ???
Happened to be checking: Snort -> Preprocs -> HTTP -> Server Configurations -> (edit) and noticed this:
Looks like these values shown (and in the underlying config) are swapped. Have been chasing a performance issue and wondering if it's related to this? (Performance issue only occurs when snort is running and interrogating traffic)
Found another anomaly (hopefully), as the values appear correct:
The descriptive text starts with the same statement for both "TCP Session timeout...."
NollipfSense last edited by
@justme2 I am running pfSense 2.5, and Snort 4.0...noticed the same also; however, I have not experienced any performance issue.