Snort Error Messages

1. Error Messge: testing snort configuration generate the following message:

...
ERROR: snort_stream5_tcp.c(906) Could not initialize tcp session memory pool.
Fatal Error, Quitting..

• Fix: Add more memory or try to reduce max_tcp connections in snort configuration file

vi /usr/local/snort/etc/snort.conf

preprocessor stream5_global: track_tcp yes, \
   track_udp yes, \
   track_icmp no, \
   max_tcp 162144, \
   max_udp 131072, \
   max_active_responses 2, \
   min_response_seconds 5