Snort: S5: Session exceeded …. errors



  • Have Snort 2.9.2.3 pkg v. 2.5.1 installed on 2.0.1

    Getting the below errors in the sys logs. Any resolution for this?

    Oct 23 21:47:24 snort[43139]: S5: Session exceeded configured max bytes to queue 1048576 using 1049202 bytes (client queue). 70.15.10.226 21163 –> 204.93.37.35 80 (0) : LWstate 0xf LWFlags 0x406007
    Oct 23 21:47:24 snort[43139]: S5: Session exceeded configured max bytes to queue 1048576 using 1049202 bytes (client queue). 70.15.10.226 21163 –> 204.93.37.35 80 (0) : LWstate 0xf LWFlags 0x406007
    Oct 23 21:25:32 snort[43139]: S5: Session exceeded configured max bytes to queue 1048576 using 1049268 bytes (client queue). 70.15.10.226 38201 –> 204.2.196.11 80 (0) : LWstate 0xf LWFlags 0x406007
    Oct 23 21:25:32 snort[43139]: S5: Session exceeded configured max bytes to queue 1048576 using 1049268 bytes (client queue). 70.15.10.226 38201 –> 204.2.196.11 80 (0) : LWstate 0xf LWFlags 0x406007
    Oct 23 21:16:47 snort[43139]: S5: Pruned session from cache that was using 1121444 bytes (new data/timedout). 70.15.10.226 60656 –> 204.2.196.51 20480 (0) : LWstate 0xc8 LWFlags 0x612107
    Oct 23 21:16:47 snort[43139]: S5: Pruned session from cache that was using 1121444 bytes (new data/timedout). 70.15.10.226 60656 –> 204.2.196.51 20480 (0) : LWstate 0xc8 LWFlags 0x612107
    Oct 23 21:09:06 snort[43139]: S5: Session exceeded configured max bytes to queue 1048576 using 1049268 bytes (client queue). 70.15.10.226 61676 –> 204.2.196.51 80 (0) : LWstate 0x48 LWFlags 0x402107
    Oct 23 21:09:06 snort[43139]: S5: Session exceeded configured max bytes to queue 1048576 using 1049268 bytes (client queue). 70.15.10.226 61676 –> 204.2.196.51 80 (0) : LWstate 0x48 LWFlags 0x402107



  • Been discussed before but still havent seen a resolution.

    http://forum.pfsense.org/index.php/topic,51810.msg277499.html#msg277499


Log in to reply