Post subject: DISCARD PACKETS Posted: Oct 14, 2009 - 05:38 PM
Joined: Oct 14, 2009
I need ur help,is anybody knows why snort got ip4disc for the packet?? why discard all the ipvdisc packet? how can i prevent discarding??
Post subject: RE: DISCARD PACKETS Posted: Oct 15, 2009 - 02:49 AM
Joined: Sep 04, 2003
East Coast - USA
Location: East Coast - USA
Most likely the packet is to large to be logged. I don't think these packets are ran through the rules. The -P option has a default, and you will need to increase that value using the -P switch on the run line?