Did things happen to get swapped around or ???

  • Happened to be checking: Snort -> Preprocs -> HTTP -> Server Configurations -> (edit) and noticed this:

    Screen Shot 2020-03-18 at 19.23.50.jpg

    Looks like these values shown (and in the underlying config) are swapped. Have been chasing a performance issue and wondering if it's related to this? (Performance issue only occurs when snort is running and interrogating traffic)


  • Found another anomaly (hopefully), as the values appear correct:

    Screen Shot 2020-03-18 at 20.23.55.jpg

    The descriptive text starts with the same statement for both "TCP Session timeout...."

  • @justme2 I am running pfSense 2.5, and Snort 4.0...noticed the same also; however, I have not experienced any performance issue.

    Screen Shot 2020-03-18 at 7.21.58 PM.png

Log in to reply