weird issue, I can't seem to resolve. I've double checked my snort.conf, and other conf files all is good, yet I keep getting this error in my terminal upon launching snort..
root@Freya:/etc/snort# snort -i eth0 -c /etc/snort/snort.conf Running in IDS mode --== Initializing Snort ==-- Initializing Output Plugins! Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file /etc/snort/snort.conf PortVar 'HTTP_PORTS' defined : [ 80 ] PortVar 'SHELLCODE_PORTS' defined : [ 0:79 81:65535 ] PortVar 'ORACLE_PORTS' defined : [ 1521 ] PortVar 'FTP_PORTS' defined : [ 21 ] Frag3 global config: Max frags: 65536 Fragment memory cap: 4194304 bytes ERROR: /etc/snort/snort.conf(293) => Invalid Frag3 engine option (overlap_limit) Fatal Error, Quitting.. root@Freya:/etc/snort#
I've checked the line pertaining to the frag3 preprocessors and all looks well. Can anyone shed some light? My snort.conf can be provided if needed.