[Snort-devel] Snort v2 and flags ECE/CWR ...

Chris Green cmg at ...402...
Wed Apr 16 12:42:03 EDT 2003


rmkml <rmkml at ...1042...> writes:

> ok solved,
>
> In my conf, I add detect_scans in your stream4 preprocessor ...
>
> but detect_scans is default config,
>
> and snort not detect this packet on default config ...
>
> Fix this ?

Working as intended :)  1 Event per packet, the packet is saved. It's
the analyst who gets to look at it.

>
> Thanks for your help.
>
> Regard.
>
-- 
Chris Green <cmg at ...402...>
Chicken's thinkin'




More information about the Snort-devel mailing list