The same binary, same rule set that works on other servers, is producing a crazy amount of data in the weird.log, for example:
1266535212.661919 : truncated_IP
Yet nothing in any other log, regardless of what interface I am monitoring. Snort on the same box, watching the same interfaces, works fine.
The MTU is 9216, but the same happens at 1512 as well.
Also using PF_RING, but that isn’t unusual in my environment. Any help is appreciated - thanks!
-brad