[Snort-devel] Removal of flags A+ in favor of established

Chris Green cmg at ...402...
Mon May 20 14:09:01 EDT 2002


"Kreimendahl, Chad J" <Chad.Kreimendahl at ...1167...> writes:

> Well, figures that I just nuked most of my dev database...   But here are
> the two I have left:
>
> (spp_stream4) TCP CHECKSUM CHANGED ON RETRANSMISSION (possible fragroute)
> detection
> (spp_stream4) TCP TOO FAST RETRANSMISSION WITH DIFFERENT DATA SIZE (possible
> fragroute) detection 

disable_evasion_alerts as an argument to stream4
-- 
Chris Green <cmg at ...402...>
"Yeah, but you're taking the universe out of context."




More information about the Snort-devel mailing list