[Snort-devel] Weird snort output - probably arpspoof output

Bill Marquette wlmarque at ...10...
Thu Jul 12 11:08:10 EDT 2001


(had to cut and paste from vi to get the hex values for this garbage)

07/11-07:33:55.030018  [**] [112:1:1] \241\350\367\300\200 [**]
07/11-07:56:11.275110  [**] [112:1:1] \357\377\362 \374^B\233\200 [**]

I'm using -Afast but based on the AlertFast() function, it looks like this is an
error in the message that gets passed into it.  I'll try and dig into this a
little more today.

--Bill






More information about the Snort-devel mailing list