[Snort-devel] 1.9.0, signature ID 1

Steven P. Donegan donegan at ...1695...
Mon Nov 25 08:50:02 EST 2002


Nope, only the bogus ones...

Anything I can do to help pin this down further?

----- Original Message ----- 
From: "Chris Green" <cmg at ...835...>
To: "Steven P. Donegan" <donegan at ...1695...>
Cc: <snort-devel at lists.sourceforge.net>
Sent: Monday, November 25, 2002 8:43 AM
Subject: Re: [Snort-devel] 1.9.0, signature ID 1


> "Steven P. Donegan" <donegan at ...1695...> writes:
> 
> > OK, hacked code again - sig_generator is 117 - at least for the first
> > instance - the setup is:
> 
> That's portscan2.  Are you getting real alerts for that packet?
> -- 
> Chris Green <cmg at ...402...>
> A watched process never cores.
> 
> 




More information about the Snort-devel mailing list