Re: on snort

[Kevin Ross <kevross33 () googlemail com>]

https://forums.snort.org/forums/support/topics/warning-ip-dgm-len-gt-captured-len-cannot-disable-it

Try this.

Regards, Kevin


On 27 January 2012 07:45, Jagan Mohan Reddy D <jagan.mohan507 () gmail com>wrote:

> While running the following command, i'm getting following error ....
>
> $ sudo /usr/local/snort/bin/snort -dev -l /var/log/snort/
>
> Running in packet logging mode
>
>         --== Initializing Snort ==--
> Initializing Output Plugins!
> Log directory = /var/log/snort/
> pcap DAQ configured to passive.
> The DAQ version does not support reload.
> Acquiring network traffic from "eth0".
> Decoding Ethernet
>
>         --== Initialization Complete ==--
>
>     ,,_     -*> Snort! <*-
>   o"  )~   Version 2.9.2 IPv6 GRE (Build 78)
>    ''''    By Martin Roesch & The Snort Team:
> http://www.snort.org/snort/snort-team
>            Copyright (C) 1998-2011 Sourcefire, Inc., et al.
>            Using libpcap version 1.0.0
>            Using PCRE version: 7.8 2008-09-05
>            Using ZLIB version: 1.2.3.3
>
> Commencing packet processing (pid=9518)
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
> (snort_decoder) WARNING: IP dgm len > captured len
>
> What does it mean....?
>
> can any one help on this, please.....!
>
>
> ----------------
> D J M Reddy
>
>
>
> ------------------------------------------------------------------------------
> Try before you buy = See our experts in action!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-dev2
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!