[Snort-devel] Weird snort output - probably arpspoof output
wlmarque at ...10...
Thu Jul 12 11:08:10 EDT 2001
(had to cut and paste from vi to get the hex values for this garbage)
07/11-07:33:55.030018 [**] [112:1:1] \241\350\367\300\200 [**]
07/11-07:56:11.275110 [**] [112:1:1] \357\377\362 \374^B\233\200 [**]
I'm using -Afast but based on the AlertFast() function, it looks like this is an
error in the message that gets passed into it. I'll try and dig into this a
little more today.
More information about the Snort-devel